CVE-2017-8631
HighSummary
A remote code execution vulnerability exists in Excel Services and various versions of Microsoft Excel and Office Online, caused by improper handling of objects in memory. This issue affects multiple versions of Excel, including 2007, 2010, 2013, and 2016, as well as web applications related to these versions.
Risk Assessment
Exploitation of this vulnerability could allow an attacker to execute remote code, posing a serious threat to the security of the organization's data and IT infrastructure.
Recommendation
It is recommended to update all affected versions of Microsoft Excel and Office to the latest security patches to minimize the risk associated with this vulnerability.
Other vulnerabilities in Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2013 RT SP1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack SP3, Microsoft Excel Web App 2013 SP1, Microsoft Excel Viewer 2007 SP3, Office Online Server
Original NVD description (English source)
A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS