Skip to content
7.8 High Exploited

CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Not observed so far

Description

Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.

Affected products and versions

Product Affected versions Fixed in
Microsoft Office Versions not published

References

Timeline

  1. Published
  2. Added to the KEV catalogue
  3. Last modified
The 45 CVEs of Microsoft Office →
Track this CVE