What is the severity of CVE-2017-0261?

CVE-2017-0261 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2017-0261?

To fix CVE-2017-0261, update Microsoft Office to the latest version and install all available security patches.

Which versions of Microsoft Office are affected by CVE-2017-0261?

CVE-2017-0261 affects Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016.

What type of vulnerability is CVE-2017-0261?

CVE-2017-0261 is a remote code execution vulnerability caused by improper handling of objects in memory.

What are the risks associated with CVE-2017-0261?

The main risk of CVE-2017-0261 is that an attacker could execute arbitrary code on a user's system, potentially leading to data compromise.

Vulnerability/
CVE-2017-0261

Exploited

critical

9.3

CWE

416

12/5/2017

11/2/2025

CVE-2017-0261: Microsoft Office Use-After-Free Vulnerability

First published: Fri May 12 2017(Updated: )

Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.

Credit: secure@microsoft.com secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Office	=2010-sp2
Microsoft Office	=2013-sp1
Microsoft Office	=2016
Microsoft Office
	=2010-sp2
	=2013-sp1
	=2016

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-0261?
CVE-2017-0261 has a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2017-0261?
To fix CVE-2017-0261, update Microsoft Office to the latest version and install all available security patches.
Which versions of Microsoft Office are affected by CVE-2017-0261?
CVE-2017-0261 affects Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016.
What type of vulnerability is CVE-2017-0261?
CVE-2017-0261 is a remote code execution vulnerability caused by improper handling of objects in memory.
What are the risks associated with CVE-2017-0261?
The main risk of CVE-2017-0261 is that an attacker could execute arbitrary code on a user's system, potentially leading to data compromise.

agent/type
agent/description
agent/title
agent/remedy
agent/weakness
agent/author
agent/severity
collector/mitre-cve
source/MITRE
agent/first-publish-date
agent/references
agent/softwarecombine
agent/event
agent/source
agent/tags
agent/last-modified-date
exploited/true
collector/cisa-known-exploited
source/CISA
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
collector/nvd-cve
collector/nvd-index
vendor/microsoft
canonical/microsoft office
version/microsoft office/2010-sp2
version/microsoft office/2013-sp1
version/microsoft office/2016

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.