VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 07:26 UTC

CVE-2018-0802

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique f…

Read full description

CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.6/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 7.8: +1.17
Fresh EPSS: 93.29%: +0.47

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 9 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Recorded Future

Press · 07 Aug 2026, 07:00 · July 2026 CVE Landscape - Recorded Future

CyberSecurityNews

Press · 13 Feb 2026, 08:00 · New XWorm RAT Campaign Uses Themed Phishing Lures and CVE‑2018‑0802 Excel Exploit to Evade Detection - CyberSecurityNews

SOC Prime

Press · 11 Feb 2026, 08:00 · XWorm Phish Abuses CVE-2018-0802 for Fileless RAT - SOC Prime

Check Point Blog

Press · 08 Feb 2024, 08:00 · MalDocs in Word and Excel: A Persistent Cybersecurity Challenge - Check Point Blog

Qualys

Press · 04 Sep 2023, 07:00 · Top 20 Vulnerabilities Exploited by Cyber Attackers - Qualys

See all 9 source documents

Proofpoint

Press · 25 Mar 2018, 07:00 · Unraveling ThreadKit: New document exploit builder used to distribute The Trick, Formbook, Loki Bot and other malware - Proofpoint

Unit 42

Press · 19 Jan 2018, 08:00 · Traps Prevents Microsoft Office Equation Editor Zero-Day CVE-2018-0802 - Unit 42

Check Point Research

Press · 09 Jan 2018, 08:00 · Exploiting CVE-2018-0802 Office Equation Vulnerabilty Demo Video - Check Point Research

Check Point Research

Press · 09 Jan 2018, 08:00 · Many Formulas, One Calc – Exploiting a New Office Equation Vulnerability - Check Point Research

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

See 3 repos with metrics

Repository	Stars	Forks	Language	Updated
rxwx/CVE-2018-0802	270	127	Python	28 Feb 2018, 12:32
Ridter/RTF_11882_0802	166	59	Python	12 Jan 2018, 11:42
zldww2011/CVE-2018-0802_POC	67	27	Python	11 Jan 2018, 09:23

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 7.8; EPSS 93.3%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: local access, no prior privileges, user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:57:54.561888+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

09 Jan 2018, 08:00

Published

10 Jan 2018, 01:00

Added to the CISA KEV catalog

03 Nov 2021, 00:00

Latest press mention

07 Aug 2026, 07:00

Score calculated

05 Nov 2026, 13:57

PoCs on GitHub

3 repositories