CVE-2018-1030

8.8 highEPSS 24%

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1026.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office

References

http://www.securityfocus.com/bid/103620
http://www.securitytracker.com/id/1040654
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1030
http://www.securityfocus.com/bid/103620
http://www.securitytracker.com/id/1040654

Check your stack JSON