CVE-2017-8511

high · 7.8

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

7.8

CVSS

20.6%

EPSS (exploit prob.)

97th

EPSS percentile

2017-06-15

Published

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	office	2010
microsoft	office	2010
microsoft	office	2013
microsoft	office	2016
microsoft	office_online_server	2016
microsoft	office_web_apps	2010
microsoft	office_web_apps_server	2013
microsoft	powerpoint_for_mac	2011
microsoft	powerpoint_for_mac	2016
microsoft	sharepoint_server	2013
microsoft	sharepoint_server	2016

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/98815
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8511
http://www.securityfocus.com/bid/98815
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8511

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-8511