CVE-2017-0262KEV · OVERDUE

Microsoft Office Remote Code Execution Vulnerability

High · published May 12, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1535
days past CISA
deadline
CVSS v3.1
7.8
EPSS
81%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 A crafty memory mishap in Microsoft Office could allow remote code execution, putting millions of users at risk! ⚡ Think of it like a restaurant that serves dishes without checking their ingredients — one wrong order could spoil the whole meal! In this case, the software mishandles objects in memory, allowing attackers to serve up malicious code without a second thought. If an attacker exploits this vulnerability, they could run any code on your system, accessing sensitive files, installing malware, or even taking complete control. It's like inviting a stranger to manage your kitchen — chaos could follow!

Put simply

Think of it like a restaurant that serves dishes without checking their ingredients — one wrong order could spoil the whole meal! In this case, the software mishandles objects in memory, allowing attackers to serve up malicious code without a second thought. This vulnerability arises when Microsoft Office fails to properly handle objects in memory, allowing remote code execution by attackers who can exploit it via a specially crafted document.

What to do

If an attacker exploits this vulnerability, they could run any code on your system, accessing sensitive files, installing malware, or even taking complete control. It's like inviting a stranger to manage your kitchen — chaos could follow! To protect yourself, immediately update Microsoft Office to the latest version and ensure you have the latest security patches applied. Consider disabling macros and only opening documents from trusted sources to reduce exposure. You've got this! Stay vigilant, patch those vulnerabilities, and keep your digital kitchen safe from unwanted guests! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.81005 · 99.6th percentile
Published
2017-05-12T14:00Z
KEV added
2022-02-10 · due 2022-08-10
EPSS history
Timeline
  • 10 FEB 00:00Z
    Added to CISA KEV — remediate by Aug 10
    kev
  • 12 MAY 14:00Z
    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in…
    cvelistv5