CVE-2017-8501
Microsoft Office allows a remote code execution vulnerability due to the way that it handles...
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
CVE-2017-8501- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
CVE-2017-8501- Updated
- 2026-11-02
EUVDEUVD-2017-17451 No score
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
EUVD-2017-17451- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v8jm-4c35-4ghr
Microsoft Office allows a remote code execution vulnerability due to the way that it handles...
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
GHSA-v8jm-4c35-4ghr- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
- microsoft office
- microsoft excel
- microsoft excel viewer
- microsoft office compatibility pack
- microsoft office online server
- microsoft sharepoint server
- microsoft corporation office 2007 sp3, microsoft excel viewer 2007 sp3, microsoft office 2010 sp2, excel services on microsoft sharepoint server 2010 sp1, microsoft office for mac 2011, microsoft excel 2013 sp1, microsoft excel 2013 rt sp1, microsoft sharepoint enterprise server 2013, microsoft excel 2016, microsoft office 2016 for mac, microsoft office online server 2016, and microsoft office compatibility pack sp3.
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-8501 is a high vulnerability (CVSS 7.8) in Microsoft Office, published July 11, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.5%, the 97th percentile. No source names a fixed version.