High severity7.8NVD Advisory· Published Aug 1, 2017· Updated May 13, 2026

CVE-2017-8663

Description

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code execution vulnerability due to the way Microsoft Outlook parses specially crafted email messages, aka "Microsoft Office Outlook Memory Corruption Vulnerability"

Affected products

Microsoft/Outlook4 versions
cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*
Microsoft Corporation/Microsoft Officev5
Range: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8663nvdPatchVendor Advisory
www.securityfocus.com/bid/100004nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039011nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.015
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000