⚠ Actively exploited
Added to CISA KEV on 2022-03-03. Federal agencies required to patch by 2022-03-24. Required action: Apply updates per vendor instructions..

CVE-2017-11826 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Corporation Microsoft Office

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents8 sources
Severity
7.8HIGHNVD
EPSS
90.8%
top 0.37%
CISA KEV
KEV
Added 2022-03-03
Due 2022-03-24
Exploit
Exploited in wild
Active exploitation observed
Affected products
6
Microsoft Corporation Microsoft OfficeMicrosoft Office Online ServerMicrosoft Office WEB Apps Server+3 more
Timeline
PublishedOct 13
KEV addedMar 3
KEV dueMar 24
Latest updateMay 17
CISA Required Action: Apply updates per vendor instructions.

Description

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶NVDmicrosoft/sharepoint_server2010, 2013+1
▶NVDmicrosoft/word4 versions+3

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-4qcg-gx82-4h36: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer,↗2022-05-17
▶
CVEList
CVE-2017-11826: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer,↗2017-10-13
▶
VulnCheck
Microsoft Office Remote Code Execution Vulnerability↗2017
▶

📋Vendor Advisories

2
CISA
Microsoft Office Remote Code Execution Vulnerability↗2022-03-03
▶
Microsoft
Microsoft Office Remote Code Execution Vulnerability↗2017-10-10
▶

🕵️Threat Intelligence

3
Fortinet
CVE-2017-11826 Exploited in the Wild with Politically Themed RTF Document↗2017-11-22
▶
Qualys
October Patch Tuesday: 28 Critical Microsoft Vulnerabilities | Qualys↗2017-10-10
▶
Qualys
October Patch Tuesday: 28 Critical Microsoft Vulnerabilities↗2017-10-10
▶
CVE-2017-11826 — HIGH severity | cvebase