CVE-2017-0262
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - secure@microsoft.com
- Published
- 2017-05-12
- Last modified
- 2025-10-21
- Known exploited (CISA KEV)
- since 2022-02-10, action due 2022-08-10: Apply updates per vendor instructions.
Affected products
References
- http://www.securityfocus.com/bid/98279
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0262
