high7.8Known exploited
CVE-2017-0262
Microsoft Office Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-02-10. Federal due date: 2022-08-10.
Apply updates per vendor instructions.
Impact
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Office | Versions 2010, 2013, 2016 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securityfocus.com/bid/98279
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262
- http://www.securityfocus.com/bid/98279
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0262