Which products and versions are affected by CVE-2018-10718?

Affected: Call Of Duty Modern Warfare 2 (Activision). The full list is in the CVE brief.

Is CVE-2018-10718 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2018-10718 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2018-10718?

Public exploit code is available.

Is there a fix for CVE-2018-10718?

Fixed versions are available, including Call Of Duty Modern Warfare 2 2018-04-26.

How urgently should CVE-2018-10718 be patched?

Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Request A Demo

WatchlistCritical

CVE-2018-10718Call Of Duty Modern Warfare 2 Out-of-Bounds Write

Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.

Published May 3, 2018 · Updated Nov 21, 2024

Key Facts

Patch immediately

CVE-2018-10718 is a critical-severity vulnerability (CVSS 10.0 v3) affecting Call Of Duty Modern Warfare 2 (Activision).
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 31% probability of exploitation in the next 30 days.
Fixed versions are available, including Call Of Duty Modern Warfare 2 2018-04-26.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Scores

CVSS v3

10.0

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS (30-day exploit likelihood)

31%

Higher than 98.2% of all scored CVEs

Exploit maturity

Proof of concept

ATLAS score

43/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Not listed

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Proof of concept

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Advisories And Exploit References

advisoryhttps://github.com/momo5502/cod-exploit

Description

Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.

Affected Products

1 affected entries in total

Product	Affected versions	Fixed in
Call Of Duty Modern Warfare 2Activision	See advisory	2018-04-26

Patched Releases

Call Of Duty Modern Warfare 2

2018-04-26

Timeline

Publicly disclosed
May 3, 2018
Last updated
Nov 21, 2024

Weakness Type

CWE-787 Out-of-bounds Write

References

FAQ

Common Questions.

Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.
Affected: Call Of Duty Modern Warfare 2 (Activision). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Call Of Duty Modern Warfare 2 2018-04-26.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Is CVE-2018-10718 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.