Exploited Vulnerabilities Daily
🌐 English

Home › Microsoft

CVE-2017-11826: Microsoft Office

EPSS81.1%No. 611 of 1739 in KEV
CVE year2017~5 yrs before listing
Same vendor in KEV389
Same product29
FieldValue
VendorMicrosoft
ProductOffice
NameMicrosoft Office Remote Code Execution Vulnerability
Added to KEV2022-03-03
US federal due date2022-03-24
Ransomware useUnknown
CWECWE-119

CISA description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2009-0238Microsoft Office2026-04-1443.2%Unknown
CVE-2026-21514Microsoft Office2026-02-101.6%Unknown
CVE-2026-21509Microsoft Office2026-01-2670.7%Unknown
CVE-2009-0556Microsoft Office2026-01-0767.3%Unknown
CVE-2007-0671Microsoft Office2025-08-1243.2%Unknown
CVE-2023-23397Microsoft Office2023-03-1497.1%Unknown
CVE-2023-21715Microsoft Office2023-02-1412.0%Unknown
CVE-2013-1331Microsoft Office2022-06-0879.8%Unknown
CVE-2009-0563Microsoft Office2022-06-0862.8%Unknown
CVE-2009-0557Microsoft Office2022-06-0853.0%Unknown
CVE-2021-38646Microsoft Office2022-03-287.9%Known
CVE-2015-1770Microsoft Office2022-03-2834.9%Unknown
CVE-2017-0261Microsoft Office2022-03-0378.1%Unknown
CVE-2016-7193Microsoft Office2022-03-0357.5%Unknown
CVE-2015-2545Microsoft Office2022-03-0385.9%Unknown

NVD — CVE-2017-11826

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Microsoft Office vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-03.