CVE-2017-0003

—

CVSS 3.0

7.8 high

EPSS

25%p98

Published

Jan 10, 2017 (Jan 10, 2017)

Modified

Jun 17, 2026

Description

Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Vendors: microsoft
Products: sharepoint enterprise server, word
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (24.7%)

In the news2 stories

Microsoft Releases 4 Security Updates — Smallest Patch Tuesday Ever!

The Hacker NewsJan 11, 09:26 UTC · Jan 11, 2017Vulnerability in the wildCVE-2017-0002 CVE-2017-0003 CVE-2017-0004

Microsoft Patch Tuesday

Cisco TalosJan 10, 20:28 UTC · Jan 10, 2017Vulnerability CVE-2017-0003 CVE-2017-0002 CVE-2017-0004