CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Office OLE Composite Moniker Remote Code Execution Vulnerability (CVE-2017-8570) Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007, 2010, 2013, 2016 and related productivity components
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via crafted Office documents containing malicious OLE objects
[Mitigation] Apply official Microsoft security patches immediately and restrict the execution of untrusted OLE/ActiveX components
Microsoft Office & WordPad OLE Remote Code Execution Vulnerability (CVE-2017-0199) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Office 2007/2010/2013/2016, Windows Vista/7/8.1, and Windows Server 2008
[Impact] Remote attackers can execute arbitrary code with the logged-in user's privileges by enticing a user to open a specially crafted document
[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted documents, and disable automatic OLE link updates via registry hardening