CVE-2017-0262VulnerabilityPublished 02/10/2022Updated 10/24/2026

CVE-2017-0262: Microsoft Office Remote Code Execution Vulnerability

Affects Microsoft OfficeSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 02/10/2022
KEV deadline: 08/10/2022
EPSS: 81.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2017-0262 (opens in a new tab)

Description

CVE-2017-0262 is a remote code execution vulnerability in Microsoft Office. It has been exploited in the wild, indicating active attacks leveraging this flaw. No specific affected versions or patch information is provided in the available data.

Summary

This vulnerability allows remote code execution within Microsoft Office products. The details specify that an attacker could execute arbitrary code remotely, potentially compromising affected systems. The vulnerability has been observed in active exploitation campaigns, underscoring its practical risk. However, no explicit information about affected Office versions or remediation status is provided in the input data.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on a victim's system running Microsoft Office, potentially leading to full system compromise. The fact that it is exploited in the wild confirms its real-world impact and threat.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should consult Microsoft's security advisories for updates and apply any available patches promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:11:10 UTC

References

Related threats