Vulnerability Details CVE-2017-0262
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.647
EPSS Ranking 98.4%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
Proposed Action
A remote code execution vulnerability exists in Microsoft Office.
Ransomware Campaign
Unknown
Products affected by CVE-2017-0262
-
cpe:2.3:a:microsoft:office:2010
-
cpe:2.3:a:microsoft:office:2013
-
cpe:2.3:a:microsoft:office:2016