CVE-2017-8588

High

Published: 11/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Microsoft WordPad in Windows allows remote code execution due to improper parsing of specially crafted files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.

Risk Assessment

Exploitation of this vulnerability could lead to remote control of the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update systems to the latest versions and apply relevant security patches to minimize risk.

Other vulnerabilities in Microsoft WordPad

CVE-2023-36563MediumActively exploited
Information Disclosure vulnerability in Microsoft WordPad. Technical details are not available in the description.

Original NVD description (English source)

Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka "WordPad Remote Code Execution Vulnerability".