{"id":"CVE-2017-8512","title":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\"","summary":"A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","vendor":"microsoft","product":"office","affected":["office = 2007","office = 2010","office = 2013","office = 2016","office_online_server = 2016","office_web_apps = 2010","office_web_apps_server = 2013","sharepoint_enterprise_server = 2013","sharepoint_enterprise_server = 2016","word_automation_services"],"published":"2017-06-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T17:17:02.047","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2017-8512","references":[{"url":"http://www.securityfocus.com/bid/98816","label":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1038668","label":"secure@microsoft.com"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512","label":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/98816","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1038668","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T15:59:37.247139Z"},"epss":0.22127,"epssPercentile":0.97638,"ingestedAt":"2026-10-15T17:18:20.020Z","slug":"CVE-2017-8512","body":"## Overview\n\nA remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-0260, and CVE-2017-8506.\n\n## Affected\n\n- `office = 2007`\n- `office = 2010`\n- `office = 2013`\n- `office = 2016`\n- `office_online_server = 2016`\n- `office_web_apps = 2010`\n- `office_web_apps_server = 2013`\n- `sharepoint_enterprise_server = 2013`\n- `sharepoint_enterprise_server = 2016`\n- `word_automation_services`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":53,"depthScoreParts":{"impact":48.4,"likelihood":4.4,"exploitation":0,"ransomware":0},"changes":[]}