← CVE Radar
CVE-2017-8570Microsoft Office Remote Code Execution Vulnerability
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
7.8 HIGHEPSS 89.88%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Aug 25, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2017-8570
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Jul 11, 2017
- Last modified
- 2026-06-17 01:26 UTC
Affected Products
As published by the CNA in the CVE record.
Microsoft CorporationMicrosoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.1 version range
- Microsoft Office
References
- securityfocus.com http://www.securityfocus.com/bid/99445
- github.com https://github.com/ParsingTeam/ppsx-file-generator
- github.com https://github.com/rxwx/CVE-2017-8570
- github.com https://github.com/tezukanice/Office8570
- portal.msrc.microsoft.com https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8570