CVE-2017-0243: Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in mem...

Security readout for executives and security teams

CVE-2017-0243 is a Microsoft Office remote code execution vulnerability involving how Office handles objects in memory. If a vulnerable Office installation processes malicious content, an attacker may be able to run code. The source bundle names older Office, Office Web Apps, and Business Productivity Servers 2010 products. Exposure is most likely where Microsoft Office 2007 SP2/SP3, Office 2010 SP2, Office Web Apps 2010 SP2, or Business Productivity Servers 2010 SP2 remain in use. Treat this as a high-priority legacy Microsoft Office risk if affected products remain in the environment. The main business concern is code execution through vulnerable Office software, but the bundle does not confirm active exploitation. Mitigation focus: Check Microsoft MSRC guidance for CVE-2017-0243 and apply the vendor-provided update if available.; Inventory and retire unsupported affected Office 2007, Office 2010, and related 2010 server products.; Restrict processing of untrusted Office content on systems that cannot be updated promptly..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.