CVE-2017-0199
Microsoft Office and WordPad Remote Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
99.9%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
99.9%EPSS · 30 days99.9%
2026-06-302026-07-16
Product
Microsoft / Office and WordPad
Vulnerability
Microsoft Office and WordPad Remote Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
Yes
Summary description
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2017-0199
No related CVEs by CWE or product.