CVE Feed

    Dashboard / CVE / CVE-2017-11826

    CVE-2017-11826

    Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

    Published:Oct 13, 2017
    Last Modified:Apr 22, 2026
    EPS:Oct 13, 2017
    EPSS Score:0.90815
    CVSS Score:7.8

    CISA Notification

    Description

    Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Mar 24, 2022
    1632 days ago
    Alert Date
    Mar 3, 2022
    1653 days ago

    Affected Products

    Vendor
    Microsoft
    Product
    Office Compatibility Pack
    Vendor
    Microsoft
    Product
    Office Online Server
    Vendor
    Microsoft
    Product
    Office Web Apps Server
    Vendor
    Microsoft
    Product
    Office Word Viewer
    Vendor
    Microsoft
    Product
    Sharepoint Enterprise Server
    Vendor
    Microsoft
    Product
    Sharepoint Server
    Vendor
    Microsoft
    Product
    Word

    Exploits

    https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.htmlhttps://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.htmlhttps://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/https://github.com/thatskriptkid/CVE-2017-11826

    Related CVEs

    CVE-2019-0669 (CVSS 6.5) — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its m…
    CVE-2018-8627 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to …
    CVE-2018-8597 (CVSS 7.8) — A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly h…
    CVE-2018-8628 (CVSS 7.8) — A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to prope…
    CVE-2018-8577 (CVSS 7.8) — A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly h…
    CVE-2018-8432 (CVSS 7.8) — A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in m…
    CVE-2018-8427 (CVSS 5.5) — An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in…
    CVE-2018-8429 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its m…
    CVE-2018-8382 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its m…
    CVE-2018-8375 (CVSS 7.8) — A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly h…

    References

    http://www.securityfocus.com/bid/101219
    http://www.securitytracker.com/id/1039541
    https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html
    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826
    https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/
    https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/
    http://www.securityfocus.com/bid/101219
    http://www.securitytracker.com/id/1039541
    https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html
    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826
    https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/
    https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11826

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High