Microsoft Office Remote Code Execution Vulnerability

Description

References

• securityfocus.com/bid/101219 · Broken Link
• securitytracker.com/id/1039541 · Broken Link
• 0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826 · Patch
• securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability · Broken Link
• tarlogic.com/en/blog/exploiting-word-cve-2017-11826 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2017-11826

Más vulnerabilidades de office online server

• CVE-2026-108446ALTO 8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97780ALTO 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97779MEDIO 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97778ALTO 8.8Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97777ALTO 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.