CVE-2017-8510: Critical severity microsoft office excel vulnerability

Published Jun 15, 2017

Updated

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

Affected Software

6 affected components

Microsoft Excel=2013-sp1

Microsoft Office=2007-sp3

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Word=2013-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8510

Event History

Jun 15, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8510?

CVE-2017-8510 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2017-8510?

To fix CVE-2017-8510, apply the latest security updates provided by Microsoft for your affected Office software.

What versions of Microsoft software are affected by CVE-2017-8510?

CVE-2017-8510 affects multiple versions including Microsoft Office 2007, 2010, 2013, 2016, and their respective service packs.

What is the impact of CVE-2017-8510?

The impact of CVE-2017-8510 allows an attacker to execute arbitrary code on the machine of an unsuspecting user.

Can CVE-2017-8510 be exploited remotely?

Yes, CVE-2017-8510 can be exploited remotely if the user opens a malicious document.