CVE-2017-0261KEV · OVERDUE

Microsoft Office Use-After-Free Vulnerability

High · published May 12, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1673
days past CISA
deadline
CVSS v3.1
7.8
EPSS
78%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 A rogue document could trigger chaos! Microsoft Office 2010, 2013, and 2016 versions are vulnerable to remote code execution due to mishandled memory objects — a hacker's dream come true! 🔥 Think of it like leaving the front door open while your housekeeper cleans: anyone can stroll in and take whatever they like. This vulnerability allows an attacker to execute their own code just by getting you to open a malicious file, making it surprisingly easy for trouble to come knocking! With a high severity level, this vulnerability could lead to an attacker executing arbitrary code on your machine, potentially compromising sensitive information or taking complete control over your system. Imagine losing important documents or even worse, letting malicious software spread across your network — absolutely devastating! ⚠️

Put simply

Think of it like leaving the front door open while your housekeeper cleans: anyone can stroll in and take whatever they like. This vulnerability allows an attacker to execute their own code just by getting you to open a malicious file, making it surprisingly easy for trouble to come knocking! This remote code execution vulnerability arises when Microsoft Office fails to adequately handle objects in memory, allowing an attacker to execute arbitrary code via a specially crafted file, often delivered through email or file sharing.

What to do

With a high severity level, this vulnerability could lead to an attacker executing arbitrary code on your machine, potentially compromising sensitive information or taking complete control over your system. Imagine losing important documents or even worse, letting malicious software spread across your network — absolutely devastating! ⚠️ To protect yourself, patch your Microsoft Office to the latest version immediately. Additionally, be cautious of unsolicited documents, and consider implementing security software that scans files before they’re opened. Don’t let a sneaky document bring your defenses down! You’ve got this! Act quickly to secure your Office installation, and you'll be standing guard against these attacks in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.78130 · 99.6th percentile
Published
2017-05-12T14:00Z
KEV added
2022-03-03 · due 2022-03-24
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 12 MAY 14:00Z
    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in…
    cvelistv5