CVE-2018-1027

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel, Microsoft Office. This CVE ID is unique from CVE-2018-0920, CVE-2018-1011, CVE-2018-1029.

• http://www.securityfocus.com/bid/103616Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040652Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1027Patch, Vendor Advisory
• http://www.securityfocus.com/bid/103616Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040652Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1027Patch, Vendor Advisory

Published

Apr 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1026A remote code execution vulnerability exists in Microsoft Of…
• CVE-2018-10260A Local File Inclusion vulnerability was found in HRSALE The…
• CVE-2018-10265An issue was discovered in HongCMS v3.0.0. There is a CSRF v…
• CVE-2018-10266BEESCMS 4.0 has a CSRF vulnerability to add an administrator…
• CVE-2018-10267WTCMS 1.0 has a CSRF vulnerability to add an administrator a…
• CVE-2018-10268An issue was discovered in FastAdmin V1.0.0.20180417_beta. T…
• CVE-2018-1028A remote code execution vulnerability exists when the Office…
• CVE-2018-10283CliqueMania loja virtual 14 has SQL Injection via the patch/…
• CVE-2018-10284Adaltech G-Ticket v70 EME104 has SQL Injection via the mobil…
• CVE-2018-10285The Ericsson-LG iPECS NMS A.1Ac web application uses incorre…
• CVE-2018-10286The Ericsson-LG iPECS NMS A.1Ac web application discloses se…
• CVE-2018-10289In MuPDF 1.13.0, there is an infinite loop in the fz_skip_sp…5.5