CVE-2017-11882

LLM-synthesized narrative grounded in this CVE's description and references.

• Microsoft/Office4 versions

  cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*+ 3 more

  • cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
• Microsoft/Office 2007 Service Pack 3llm-create
• Microsoft/Office 2010 Service Pack 2llm-create
• Microsoft/Office 2016llm-fuzzy

• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882nvdPatchVendor Advisory
• reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882nvdExploitThird Party Advisory
• 0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.htmlnvdExploitThird Party Advisory
• 0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.htmlnvdExploitPatchThird Party Advisory
• researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/nvdExploitThird Party Advisory
• web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/nvdExploitMitigationThird Party Advisory
• www.exploit-db.com/exploits/43163/nvdExploitThird Party AdvisoryVDB Entry
• www.securityfocus.com/bid/101757nvdThird Party AdvisoryVDB Entry
• www.securitytracker.com/id/1039783nvdThird Party AdvisoryVDB Entry
• www.kb.cert.org/vuls/id/421280nvdThird Party AdvisoryUS Government Resource
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Inside the customer environment: Where threat actors, vulnerabilities, and exposed assets intersect
  Tenable Blog · May 27, 2026
• Russian Threat Groups Use RDP, VPN, Supply Chain Attacks, and Social Engineering for Initial Access
  Cyber Security News · May 22, 2026
• Exploits and vulnerabilities in Q1 2026
  Securelist · May 7, 2026