Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
Product
Office and WordPad
Added to KEV
3 Nov 2021
Federal remediation due
3 May 2022
Known ransomware use
Yes
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
More advisories, affected versions and source history
cve-program · CVE-2017-0199
Published
Office/WordPad
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Office/WordPad",
"vendor": "Microsoft Corporation",
"versions": [
{
"status": "affected",
"version": "Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1"
}
]
}