CVE-2017-8550

5.4 mediumEPSS 22%

Medium (5.4) in microsoft office. EPSS 22% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remote Code Execution Vulnerability".

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

EPSS: 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office

References

http://www.securityfocus.com/bid/98916
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550
https://www.exploit-db.com/exploits/42316/
http://www.securityfocus.com/bid/98916
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550

Check your stack JSON