Firetruck

CVE-2017-11774

KEV

Microsoft Office Outlook Security Feature Bypass Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Office
Date added
Nov 3, 2021
Due date
May 3, 2022
Known ransomware use
Unknown
CWEs
CWE-119

Description

Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.

Required action

Apply updates per vendor instructions.

Notes