CVE-2018-0802Vulnerability
Microsoft Office Memory Corruption Vulnerability
Reported by 3 independent sources · first reported by Group-IB · last reported
Last reported 1 month ago
Fix due 3 May 2022
Used by ransomware: knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
Exploits and vulnerabilities in Q2 2026“CVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component”
-
July 2026 CVE Landscape“CVE-2018-0802”
-
Nice Try Tonto Team“The tool allows the threat actor to create malicious RTF exploits with plausible decoy content for CVE-2017-11882, CVE-2018-0802, and CVE-2018-0798, which are the vulnerabilities in the Microsoft Equation Editor.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2017-11882, CVE-2025-49113, CVE-2026-33824, CVE-2024-42009, CVE-2026-15409, CVE-2026-15410, CVE-2026-25089, CVE-2026-39808, CVE-2026-42897, CVE-2026-43284, CVE-2025-55182, CVE-2025-8088, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-31635, CVE-2026-43494
Thanks — we review every report.