{"id":"CVE-2018-1028","aliases":["EUVD-2018-11688","GHSA-87hq-2c3x-p62g"],"status":"published","title":"A remote code execution vulnerability exists when the Office graphics component improperly...","description":"A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka \"Microsoft Office Graphics Remote Code Execution Vulnerability.\" This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.18919,"percentile":0.97313,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2018-04-12T01:00:00Z","modified":"2026-06-17T01:50:19Z","products":[{"vendor":"microsoft","product":"excel"},{"vendor":"microsoft","product":"excel_services"},{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"microsoft sharepoint"},{"vendor":"microsoft","product":"microsoft sharepoint server"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_2010"},{"vendor":"microsoft","product":"office_web_apps"},{"vendor":"microsoft","product":"sharepoint_enterprise_server"},{"vendor":"microsoft","product":"word"},{"vendor":"microsoft","product":"word_automation_services"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040654","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103641","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1028"},{"url":"https://github.com/advisories/GHSA-87hq-2c3x-p62g"}],"sources":{"cve":[{"id":"CVE-2018-1028","description":"A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka \"Microsoft Office Graphics Remote Code Execution Vulnerability.\" This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11.716Z","updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-11688","description":"A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka \"Microsoft Office Graphics Remote Code Execution Vulnerability.\" This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11Z","updated_at":"2026-11-03T02:40:17.442322Z"}],"ghsa":[{"id":"GHSA-87hq-2c3x-p62g","title":"A remote code execution vulnerability exists when the Office graphics component improperly...","description":"A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka \"Microsoft Office Graphics Remote Code Execution Vulnerability.\" This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.","status":"published","published":"2022-05-14T03:22:25Z","modified":"2023-02-02T05:07:47Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:52:35.379197Z"}],"nvd":[{"id":"CVE-2018-1028","description":"A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka \"Microsoft Office Graphics Remote Code Execution Vulnerability.\" This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.","status":"published","published":"2018-04-12T01:29:10.173Z","modified":"2026-06-17T01:50:19.36Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:04:25.506659Z"}]}}