CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-10-13
Microsoft Outlook Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2017-11774) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and Office memory handling components
[Impact] Attackers can bypass the Outlook sandbox and execute arbitrary OS commands with local user privileges by injecting malicious Folder Home Page properties
[Mitigation] Apply official Microsoft security updates and disable the Outlook Folder Home Page feature via registry modifications