CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-8509

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.071

EPSS Ranking 91.0%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.3

References

Products affected by CVE-2017-8509

Microsoft » Office » Version: 2007

cpe:2.3:a:microsoft:office:2007
Microsoft » Office » Version: 2010

cpe:2.3:a:microsoft:office:2010
Microsoft » Office » Version: 2013

cpe:2.3:a:microsoft:office:2013
Microsoft » Office » Version: 2016

cpe:2.3:a:microsoft:office:2016
Microsoft » Office Compatibility Pack » Version: N/A

cpe:2.3:a:microsoft:office_compatibility_pack:-
Microsoft » Office Web Apps » Version: 2010

cpe:2.3:a:microsoft:office_web_apps:2010
Microsoft » Office Web Apps Server » Version: 2013

cpe:2.3:a:microsoft:office_web_apps_server:2013
Microsoft » Onenote » Version: 2010

cpe:2.3:a:microsoft:onenote:2010
Microsoft » Sharepoint Server » Version: 2010

cpe:2.3:a:microsoft:sharepoint_server:2010
Microsoft » Sharepoint Server » Version: 2013

cpe:2.3:a:microsoft:sharepoint_server:2013
Microsoft » Sharepoint Server » Version: 2016

cpe:2.3:a:microsoft:sharepoint_server:2016
Microsoft » Word » Version: 2007

cpe:2.3:a:microsoft:word:2007
Microsoft » Word » Version: 2010

cpe:2.3:a:microsoft:word:2010
Microsoft » Word » Version: 2013

cpe:2.3:a:microsoft:word:2013
Microsoft » Word » Version: 2016

cpe:2.3:a:microsoft:word:2016
Microsoft » Word For Mac » Version: 2016

cpe:2.3:a:microsoft:word_for_mac:2016

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-8509

Products

Pricing

Contact Us