← Back to CVEs

CVE-2017-11826

HIGHCISA KEV

7.8

Description

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published10/13/2017

Last Modified4/22/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorMicrosoft

ProductOffice

Vulnerability NameMicrosoft Office Remote Code Execution Vulnerability

KEV Date Added2022-03-03

Remediation Due Date2022-03-24

Ransomware UseUnknown

Affected Products

microsoft:office_compatibility_packmicrosoft:office_online_servermicrosoft:office_web_apps_servermicrosoft:office_word_viewermicrosoft:sharepoint_enterprise_servermicrosoft:sharepoint_servermicrosoft:word

Weaknesses (CWE)

CWE-119CWE-119

References

http://www.securityfocus.com/bid/101219(secure@microsoft.com)

http://www.securitytracker.com/id/1039541(secure@microsoft.com)

https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html(secure@microsoft.com)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826(secure@microsoft.com)

https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/(secure@microsoft.com)

https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/(secure@microsoft.com)

http://www.securityfocus.com/bid/101219(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039541(af854a3a-2127-422b-91ae-364da2661108)

https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html(af854a3a-2127-422b-91ae-364da2661108)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826(af854a3a-2127-422b-91ae-364da2661108)

https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/(af854a3a-2127-422b-91ae-364da2661108)

https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11826(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.