KEV · Actively exploited
CVE-2017-11774
CVE-2017-11774 is actively exploited (CISA KEV catalog) : high severity (CVSS 7.8), 2 tracked apps concerned, none still exposed on their current version.
- Severity (CVSS)
- 7.8
- Exploitation
- Confirmed
- Tracked apps
- 2
- Still exposed
- 0
NVD scale
CISA KEV · EPSS predicts 59.9 %
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
Attack vector : Local
No privileges required
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
59.89%
predictive model; CISA confirms active exploitation
percentile 99.1%
CISA Known Exploited Vulnerability
- Added to KEV
- 2021-11-03
- Remediation deadline
- 2022-05-03
- Required action
- Apply updates per vendor instructions.
- Ransomware
- Unknown (not documented by CISA)
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
-
Affected - Fixed in - Latest tracked - undetermined
Vulnerable CPE configurations (8)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:* |