August 14, 2026

CVE Watchtower


← Back to CVE List

CVE-2017-0261NVD

Vulnerability Summary

Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.
Severity Level
HIGH(7.8)
Published Date
May 12, 2017
Last Modified
Apr 22, 2026
Exploitation Status
ACTIVE
EPSS Score (30-Day)
92.30%Probability
Root Weakness (CWE)
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v3.1 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh