CVE-2017-8501
Microsoft Office allows a remote code execution vulnerability due to the way that it handles...
CVE-2017-8501 is a high vulnerability (CVSS 7.8) in Microsoft Office, published July 11, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.5%, the 97th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 3.0, NVD
- Exploit chance
- 22.5%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- microsoft office
- microsoft excel
- microsoft excel viewer
- microsoft office compatibility pack
- microsoft office online server
- microsoft sharepoint server
- microsoft corporation office 2007 sp3, microsoft excel viewer 2007 sp3, microsoft office 2010 sp2, excel services on microsoft sharepoint server 2010 sp1, microsoft office for mac 2011, microsoft excel 2013 sp1, microsoft excel 2013 rt sp1, microsoft sharepoint enterprise server 2013, microsoft excel 2016, microsoft office 2016 for mac, microsoft office online server 2016, and microsoft office compatibility pack sp3.
What each source reports
NVD Score used
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
CVE-2017-8501- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
CVE-2017-8501- Updated
- 2026-11-02
EUVDEUVD-2017-17451No score
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
EUVD-2017-17451- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v8jm-4c35-4ghr
Microsoft Office allows a remote code execution vulnerability due to the way that it handles...
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
- Record
GHSA-v8jm-4c35-4ghr- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.