CVE-2017-11882
Microsoft Office Memory Corruption Vulnerability
Microsoft OfficeApplications & CMS
CVSS
7.8HighExploit odds (EPSS)99.9%Chance of exploitation activity in the next 30 days, higher than 99.9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
CISA required actionApply updates per vendor instructions. CISA KEV
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Timeline
- 15 Nov 2017, 03:00 UTCPublishedCVE List
- 15 Nov 2017Exploit code publicMetasploit
- 3 Nov 2021Added to CISA KEVCISA KEV
Public exploit code and templates 2
- Exploit moduleMicrosoft Office CVE-2017-11882 15 Nov 2017Metasploit
- Remote exploitMicrosoft Office - OLE Remote Code Execution 20 Nov 2017Exploit-DB
Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.
Description
Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.
Text from CVE List
Affected versions 1
- Microsoft Officeaffected: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016CVE List
References 13
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882Advisoryvia CVE List
- kb.cert.org/vuls/id/421280Advisoryvia CVE List
- github.com/0x09AL/CVE-2017-11882-metasploitExploitvia CVE List
- exploit-db.com/exploits/43163/Exploitvia CVE List
- nvd.nist.gov/vuln/detail/CVE-2017-11882Referencevia CISA KEV
- github.com/embedi/CVE-2017-11882Referencevia CVE List
- github.com/unamer/CVE-2017-11882Referencevia CVE List
- github.com/rxwx/CVE-2017-11882Referencevia CVE List
- researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/Referencevia CVE List
- 0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.htmlReferencevia CVE List
- 0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.htmlReferencevia CVE List
- web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/Referencevia CVE List
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11882Referencevia CVE List