KEV · Actively exploited

CVE-2017-11882

CVE-2017-11882 is actively exploited (CISA KEV catalog), rated high by the vendor: 0 tracked apps concerned, none still exposed on their current version.

Severity (CVSS): -
Exploitation: Confirmed
Tracked apps: 0
Still exposed: 0

Vendor bulletin scale : NVD CVSS pending Public exploit : ExploitDB Published on 2017-11-14

Microsoft Office Memory Corruption Vulnerability

EPSS 99.95% predictive model; CISA confirms active exploitation percentile 100.0%

CISA Known Exploited Vulnerability

Added to KEV: 2021-11-03
Remediation deadline: 2022-05-03
Required action: Apply updates per vendor instructions.
Ransomware: Yes, known ransomware campaign

View on NVD ↗ CISA KEV catalog ↗