CVE-2017-11826 CVE-2017-11826

漏洞描述

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

影响产品

微软公司Microsoft Word查看产品 →微软公司Sharepoint-Server查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

www.securityfocus.comhttp://www.securityfocus.com/bid/101219↗portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826↗www.securitytracker.comhttp://www.securitytracker.com/id/1039541↗0patch.blogspot.comhttps://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2023-21716RCE CVE-2023-21716 MicrosoftOfficeWebServer Microsoft Word Sharepoint-Server+1	严重	9.8	88.6%	PoCEXP	2023/02/14
CVE-2018-0802RCE CVE-2018-0802 Microsoft-Office-XML MicrosoftOfficeWebServer Microsoft Word+1	高危	7.8	94.1%	PoCEXP	2018/01/10
CVE-2018-0798RCE CVE-2018-0798 Microsoft-Office-XML Microsoft Word office365	高危	8.8	94.2%	PoCEXP	2018/01/10
CVE-2015-0097RCE CVE-2015-0097 Microsoft Excel Microsoft PowerPoint Microsoft Word	严重	9.3	74.7%	PoCEXP	2015/03/11
CVE-2006-6561RCE CVE-2006-6561 Microsoft Word	严重	9.3	76.3%	PoCEXP	2006/12/14

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞