High severity7.8CISA KEVNVD Advisory· Published Jul 11, 2017· Updated Apr 22, 2026
CVE-2017-8570
CVE-2017-8570
Description
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.
Affected products
6cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570nvdPatchVendor Advisory
- www.securityfocus.com/bid/99445nvdBroken LinkThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.