CVE-2017-11882

🗓️ 15 Nov 2017 03:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 22 Media mentions👁 2700 Views

Microsoft Office versions 2007, 2010, 2013, and 2016 allow arbitrary code execution

Reporter	Title	Published	Views	Family All 608
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	25 Jan 202112:44	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202609:26	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202613:56	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	20 Nov 201716:35	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	30 Dec 201713:20	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Jan 201811:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	22 Nov 201701:11	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit

NVD

Node

microsoft officeMatch2007sp3

microsoft officeMatch2010sp2

microsoft officeMatch2013sp1

microsoft officeMatch2016

[
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016"
      }
    ]
  }
]

Source	Link
0patch	www.0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html
github	www.github.com/embedi/CVE-2017-11882
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882
securityfocus	www.securityfocus.com/bid/101757
github	www.github.com/unamer/CVE-2017-11882
securitytracker	www.securitytracker.com/id/1039783
0patch	www.0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html
exploit-db	www.exploit-db.com/exploits/43163/
web	www.web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/
github	www.github.com/0x09AL/CVE-2017-11882-metasploit

22 Apr 2026 13:48Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8

CVSS 29.3

EPSS0.94354

SSVC