---
id: CVE-2017-8512
title: >-
  A remote code execution vulnerability exists in Microsoft Office when the
  software fails to properly handle objects in memory, aka "Office Remote Code
  Execution Vulnerability"
summary: >-
  A remote code execution vulnerability exists in Microsoft Office when the
  software fails to properly handle objects in memory, aka "Office Remote Code
  Execution Vulnerability". This CVE ID is unique from CVE-2017-8509,
  CVE-2017-8510, CVE…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
vendor: microsoft
product: office
affected:
  - office = 2007
  - office = 2010
  - office = 2013
  - office = 2016
  - office_online_server = 2016
  - office_web_apps = 2010
  - office_web_apps_server = 2013
  - sharepoint_enterprise_server = 2013
  - sharepoint_enterprise_server = 2016
  - word_automation_services
published: '2017-06-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T17:17:02.047'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2017-8512'
references:
  - url: 'http://www.securityfocus.com/bid/98816'
    label: secure@microsoft.com
  - url: 'http://www.securitytracker.com/id/1038668'
    label: secure@microsoft.com
  - url: >-
      https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512
    label: secure@microsoft.com
  - url: 'http://www.securityfocus.com/bid/98816'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securitytracker.com/id/1038668'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T15:59:37.247139Z'
epss: 0.22127
epssPercentile: 0.97638
ingestedAt: '2026-10-15T17:18:20.020Z'
---

## Overview

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-0260, and CVE-2017-8506.

## Affected

- `office = 2007`
- `office = 2010`
- `office = 2013`
- `office = 2016`
- `office_online_server = 2016`
- `office_web_apps = 2010`
- `office_web_apps_server = 2013`
- `sharepoint_enterprise_server = 2013`
- `sharepoint_enterprise_server = 2016`
- `word_automation_services`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.