CVE-2017-11935

HIGH 7.8CVE-2017-11935 · Published 12/12/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
office microsoft	`= 2016`	No fix yet

Description

Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability".

References

securityfocus.com/bid/102067 · Third Party Advisory
securitytracker.com/id/1039989 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11935 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free