CVE-2017-0262: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability whe...

Security readout for executives and security teams

CVE-2017-0262 is a Microsoft Office memory-handling flaw that can let attacker-controlled Office content run code after a user opens it. Business risk is high because compromise can affect confidentiality, integrity, and availability on the user’s workstation. CISA’s KEV listing means exploitation has been observed, so legacy Office exposure should be treated urgently. Exposure is most likely on endpoints still running the affected Office versions, especially where users can receive or open untrusted Office documents. The bundle does not identify other affected products, exact file types, or specific update levels beyond the named Office releases. Prioritize this as a high-risk legacy Office remediation item. The combination of code execution, user-assisted document delivery, high impact, and CISA KEV status makes delay difficult to justify where affected Office deployments remain in use. Mitigation focus: Follow Microsoft’s MSRC advisory for CVE-2017-0262 and deploy listed Office updates.; Inventory endpoints for Office 2010 SP2, Office 2013 SP1, and Office 2016.; Prioritize remediation for systems handling external email or downloaded documents..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.