HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2017-0199

CVSS 7.8v3.1pub. 2017-04-12upd. 2026-04-22

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Microsoft Office
APP
Microsoft
2007201020132016
Microsoft Windows 7
OS
Microsoft
all versions
Microsoft Windows Server 2008
OS
Microsoft
r2
Microsoft Windows Server 2012
OS
Microsoft
all versions
Microsoft Windows Vista
OS
Microsoft
all versions
Philips Intellispace Portal
APP
Philips
7.08.0

CISA KEV — detailsi

Vendori: Microsoft ↗
Producti: Office and WordPad
Added to KEVi: November 3, 2021
Remediation deadline (US Federal)i: May 3, 2022(overdue)
Ransomwarei: Active ransomware campaigns exploit this vulnerability

🔧Advisory Microsoft↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

🔴