CVE-2018-1026

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1030.

• http://www.securityfocus.com/bid/103613Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040654Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1026Patch, Vendor Advisory
• http://www.securityfocus.com/bid/103613Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040654Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1026Patch, Vendor Advisory

Published

Apr 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10254Netwide Assembler (NASM) 2.13 has a stack-based buffer over-…
• CVE-2018-10255A CSV Injection vulnerability was discovered in clustercodin…8.8
• CVE-2018-10256A SQL Injection vulnerability was discovered in HRSALE The U…
• CVE-2018-10257A CSV Injection vulnerability was discovered in HRSALE The U…
• CVE-2018-10258A CSV Injection vulnerability was discovered in Shopy Point …
• CVE-2018-10259An Authenticated Stored XSS vulnerability was found in HRSAL…
• CVE-2018-10260A Local File Inclusion vulnerability was found in HRSALE The…
• CVE-2018-10265An issue was discovered in HongCMS v3.0.0. There is a CSRF v…
• CVE-2018-10266BEESCMS 4.0 has a CSRF vulnerability to add an administrator…
• CVE-2018-10267WTCMS 1.0 has a CSRF vulnerability to add an administrator a…
• CVE-2018-10268An issue was discovered in FastAdmin V1.0.0.20180417_beta. T…
• CVE-2018-1027A remote code execution vulnerability exists in Microsoft Ex…7.8