Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2017-8509

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

  • Published: Jun 15, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-8509
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / word 2013-sp1 2013-sp1.x
microsoft / word 2016 2016.x
microsoft / office 2007-sp3 2007-sp3.x
microsoft / word_for_mac 2016 2016.x
microsoft / office_compatibility_pack --sp3 --sp3.x
microsoft / office 2013-sp1 2013-sp1.x
microsoft / sharepoint_server 2010-sp2 2010-sp2.x
microsoft / office 2010-sp2 2010-sp2.x
microsoft / sharepoint_server 2013-sp1 2013-sp1.x
microsoft / onenote 2010 2010.x
microsoft / office_web_apps_server 2013 2013.x
microsoft / word 2010-sp2 2010-sp2.x
microsoft / office_web_apps 2010 2010.x
microsoft / sharepoint_server 2016 2016.x
microsoft / office 2016 2016.x
microsoft / word 2007-sp3 2007-sp3.x