CVE-2017-8509

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

CVSS 3.0

8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-25)

Published

2017-06-15

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• microsoft:office
• microsoft:office_compatibility_pack
• microsoft:office_web_apps
• microsoft:office_web_apps_server
• microsoft:onenote
• microsoft:sharepoint_server
• microsoft:word
• microsoft:word_for_mac

References

• http://www.securityfocus.com/bid/98812
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509
• http://www.securityfocus.com/bid/98812
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509

Check your stackJSON