CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-10-13
Microsoft Office & Word Memory Corruption Remote Code Execution Vulnerability (CVE-2017-11826) Technical Advisory
[Affected Scope] Microsoft Office 2010, Word 2007/2010/2013/2016, SharePoint Server 2010, Office Web Apps Server 2010/2013, and Word Viewer.
[Impact] Successful exploitation allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted OOXML document.
[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted email attachments, and enable Attack Surface Reduction (ASR) rules.