{"id":"CVE-2017-8509","aliases":["EUVD-2017-17459","GHSA-7q45-gm3c-7wcj"],"status":"published","title":"A remote code execution vulnerability exists in Microsoft Office when the software fails to...","description":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.18238,"percentile":0.97233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-06-15T01:00:00Z","modified":"2026-10-15T16:17:29Z","products":[{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_compatibility_pack"},{"vendor":"microsoft","product":"office_web_apps"},{"vendor":"microsoft","product":"office_web_apps_server"},{"vendor":"microsoft","product":"onenote"},{"vendor":"microsoft","product":"sharepoint_server"},{"vendor":"microsoft","product":"word"},{"vendor":"microsoft","product":"word_for_mac"},{"vendor":"microsoft corporation","product":"microsoft office"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98812","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8509"},{"url":"https://github.com/advisories/GHSA-7q45-gm3c-7wcj"}],"sources":{"cve":[{"id":"CVE-2017-8509","description":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.","status":"published","published":"2017-06-15T01:00:00Z","modified":"2026-10-15T15:59:21.43Z","updated_at":"2026-11-02T14:33:14.89365Z"}],"euvd":[{"id":"EUVD-2017-17459","description":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.","status":"published","published":"2017-06-15T01:00:00Z","modified":"2026-10-15T15:59:21Z","updated_at":"2026-11-02T17:00:12.42385Z"}],"ghsa":[{"id":"GHSA-7q45-gm3c-7wcj","title":"A remote code execution vulnerability exists in Microsoft Office when the software fails to...","description":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.","status":"published","published":"2022-05-13T01:47:35Z","modified":"2023-02-02T05:01:31Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:12.391632Z"}],"nvd":[{"id":"CVE-2017-8509","description":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.","status":"published","published":"2017-06-15T01:29:03.82Z","modified":"2026-10-15T16:17:29.05Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:50.782497Z"}]}}