High severity7.8CISA KEVNVD Advisory· Published Oct 13, 2017· Updated Jun 17, 2026
CVE-2017-11774
CVE-2017-11774
Description
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- Range: SP2
- Range: SP1 and RT SP1
Patches
Vulnerability mechanics
References
5- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774nvdPatchVendor Advisory
- sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/nvdExploit
- www.securityfocus.com/bid/101098nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039542nvdBroken LinkThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.