Microsoft Office Remote Code Execution Vulnerability

概要

参考情報

• securityfocus.com/bid/101219 · Broken Link
• securitytracker.com/id/1039541 · Broken Link
• 0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826 · Patch
• securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability · Broken Link
• tarlogic.com/en/blog/exploiting-word-cve-2017-11826 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2017-11826

office online server のその他の脆弱性

• CVE-2026-108446高 8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97780高 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97779中 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97778高 8.8Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97777高 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.