CVE-2017-11878

High

Published: 15/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in Microsoft Excel allows an attacker to execute arbitrary code in the context of the current user due to improper handling of objects in memory.

Risk Assessment

Exploitation of this vulnerability could lead to the compromise of the user's system, posing a significant threat to the organization's data security.

Recommendation

It is recommended to update to the latest versions of Excel and apply the relevant security patches.

Other vulnerabilities in Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2013 RT SP1, Microsoft Excel 2016, Microsoft Office Compatibility Pack SP3, Microsoft Excel Viewer 2007 SP3

CVE-2017-8631High
A remote code execution vulnerability exists in Excel Services and various versions of Microsoft Excel and Office Online, caused by improper handling of objects in memory. This issue affects multiple versions of Excel, including 2007, 2010, 2013, and 2016, as well as web applications related to these versions.

Original NVD description (English source)

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability".

Vulnerability data from NVD (NIST) · CISA KEV · EPSS