doc exploit cve 2018