CVE-2017-0262

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 contain a remote code execution vulnerability when the software fails to properly handle objects in memory. The flaw is tracked as CVE-2017-0262 and carries a CVSS 3.1 base score of 7.8 reflecting local attack vector, low attack complexity, no privileges required, and required user interaction.

An attacker can exploit the issue by supplying a malicious document that triggers improper memory handling once opened by a victim, resulting in arbitrary code execution under the privileges of the current user and full impact to confidentiality, integrity, and availability.

Microsoft's security advisory directs administrators to apply the updates released for the affected Office versions. The vulnerability appears in CISA's catalog of known exploited vulnerabilities, confirming observed in-the-wild use.