CVE Watch—

CVE-2017-11826

Microsoft Office Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

81.3%

p100

KEV

YES

Mar 3, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

81.2%EPSS · 30 days81.3%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Office

Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Added to KEV

Mar 3, 2022

Remediate by

Mar 24, 2022

Known ransomware use

Summary description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-11826

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-217157.3 HIG

96.1%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability58d CVE-2021-422927.8 HIG

98.7%

KEV—80Microsoft Excel Security Feature Bypass58d CVE-2021-386467.8 HIG

94.7%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability66d CVE-2021-270597.6 HIG

93.3%

KEV—78Microsoft Office Remote Code Execution Vulnerability58d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—

99.9%

KEV—80Microsoft Office Memory Corruption Vulnerability—