CVE-2017-11854

8.8 highEPSS 8.4%

High (8.8) in microsoft. EPSS 8.4% chance of exploitation in the next 30 days.

Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Word Memory Corruption Vulnerability".

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 8.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_compatibility_pack
microsoft:word

References

http://www.securityfocus.com/bid/101746
http://www.securitytracker.com/id/1039795
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11854
http://www.securityfocus.com/bid/101746
http://www.securitytracker.com/id/1039795

Check your stack JSON