{"schemaVersion":3,"id":"CVE-2017-0261","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft Office Use-After-Free Vulnerability","description":"Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka \"Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.","dates":{"published":"2017-05-12T14:00:00.000Z","modified":"2025-10-21T23:55:40.908Z","reserved":null,"kevAdded":["2022-03-03T00:00:00.000Z"],"kevDue":["2022-03-24T00:00:00.000Z"]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.7813,"percentile":0.99575,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.7813},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.7813,"percentile":0.99575}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.7813,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.7813,"percentile":0.99575}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Office Use-After-Free Vulnerability","description":"Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2017-0261","label":"nvd.nist.gov/vuln/detail/CVE-2017-0261"}],"vendor":"Microsoft","product":"Office","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Office Use-After-Free Vulnerability","description":"Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2017-0261","label":"nvd.nist.gov/vuln/detail/CVE-2017-0261"}],"vendor":"Microsoft","product":"Office","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"microsoft corporation","product":"microsoft office","name":"Microsoft Office","label":"microsoft office","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016","eol":null,"hubHref":"/vendor/microsoft_corporation/microsoft_office"},{"vendor":"microsoft","product":"office","name":"office","label":"office","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2010:sp2","noFixRecorded":false,"fixedIn":null},{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null},{"text":"2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"2010:sp2 | 2013:sp1 | 2016","eol":{"isEol":true,"eolDate":"2025-10-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"2016","label":"2016","eolFrom":"2025-10-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"office","label":"Microsoft Office","category":"app"}},"hubHref":"/vendor/microsoft/office"}],"affectedCount":2,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98104","label":"www.securityfocus.com/bid/98104","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1038444","label":"www.securitytracker.com/id/1038444","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0261","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0261","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-05-12T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft Office Use-After-Free Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-03-24T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:40.908Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T06:14:30.211Z","stale":false,"partial":false}}