Description

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

Remediation

References

CVE-2017-8509

Related Vulnerabilities

WordPress Plugin Relevanssi-A Better Search SQL Injection (3.2)

Plone CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7135)

SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-45659)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39200)

IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2019-4151)

Severity

High

Classification

CVE-2017-8509 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities