CVE-2017-11825

7.8 highEPSS 23%

High (7.8) in microsoft. EPSS 23% chance of exploitation in the next 30 days.

Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability".

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-10-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_for_mac

References

http://www.securityfocus.com/bid/101124
http://www.securitytracker.com/id/1039539
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11825
http://www.securityfocus.com/bid/101124
http://www.securitytracker.com/id/1039539

Check your stack JSON