CVE-2018-1028

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2018
Source publication: Apr 12, 2018
Source updated: Aug 5, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Word

Vendor: Microsoft
Product: Word
Platforms: Unknown
Default status: Unknown

Word · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Automation Services on Microsoft SharePoint Server 2010 Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
Automation Services on Microsoft SharePoint Server 2013 Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Office

Vendor: Microsoft
Product: Microsoft Office
Platforms: Unknown
Default status: Unknown

Microsoft Office · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2010 Service Pack 2 (32-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2010 Service Pack 2 (64-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 RT Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (32-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (64-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (32-bit edition)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (64-bit edition)	`affected`	Unavailable	Unavailable	Unavailable	None listed
Web Apps 2010 Service Pack 2	`affected`	Unavailable	Unavailable	Unavailable	None listed
Web Apps Server 2013 Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft SharePoint

Vendor: Microsoft
Product: Microsoft SharePoint
Platforms: Unknown
Default status: Unknown

Microsoft SharePoint · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Enterprise Server 2016	`affected`	Unavailable	Unavailable	Unavailable	None listed

Excel

Vendor: Microsoft
Product: Excel
Platforms: Unknown
Default status: Unknown

Excel · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Services on Microsoft SharePoint Enterprise Server 2013 Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft SharePoint Server

Vendor: Microsoft
Product: Microsoft SharePoint Server
Platforms: Unknown
Default status: Unknown

Microsoft SharePoint Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2013 Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed