CVE-2017-8570
Microsoft Office allows a remote code execution vulnerability due to the way that it handles...
CVE-2017-8570 is a high vulnerability (CVSS 7.8) in Microsoft Office, published July 11, 2017. CISA lists it as known to be exploited, since February 25, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 89.9%, the 99th percentile. No source names a fixed version.
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
- Record
CVE-2017-8570- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
- Record
CVE-2017-8570- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2017-17520
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
- Record
EUVD-2017-17520- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p72w-9mwc-fgvp
Microsoft Office allows a remote code execution vulnerability due to the way that it handles...
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
- Record
GHSA-p72w-9mwc-fgvp- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
CISA KEV No score
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
- Record
CVE-2017-8570- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Office - 'Composite Moniker Remote Code Execution | 2018-01-09 |
| PoC in GitHub | Drac0nids/CVE-2017-8570 | 2019-01-03 |
| PoC in GitHub | MaxSecurity/Office-CVE-2017-8570 | 2018-02-26 |
| PoC in GitHub | SwordSheath/CVE-2017-8570 | 2018-04-08 |
| PoC in GitHub | erfze/CVE-2017-8570 | 2020-08-06 |
| PoC in GitHub | rxwx/CVE-2017-8570 | 2018-01-09 |
| PoC in GitHub | sasqwatch/CVE-2017-8570 | 2019-05-08 |
| PoC in GitHub | temesgeny/ppsx-file-generator | 2017-07-24 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | created | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, NVD, PoC in GitHub |
References
securityfocus.com/bid/99445
github.com/rxwx/CVE-2017-8570
portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8570
nvd.nist.gov/vuln/detail/CVE-2017-8570