High severity7.8NVD Advisory· Published Nov 15, 2017· Updated May 13, 2026

CVE-2017-11878

Description

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability".

Affected products

Microsoft/Excel5 versions
cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:excel:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
Microsoft/Excel Viewer
cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
Microsoft/Office Compatibility Pack
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
Microsoft Corporation/Microsoft Officev5
Range: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11878nvdIssue TrackingPatchVendor Advisory
www.securityfocus.com/bid/101756nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039783nvdIssue TrackingThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000