CVE-2017-8570: Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in mem...

Security readout for executives and security teams

CVE-2017-8570 is a Microsoft Office remote code execution flaw. An attacker could use a malicious Office document or object path to run code when a user opens or interacts with content. Because CISA lists it in KEV, it should be treated as exploited in the wild, especially on legacy Office installations. Exposure is most likely on endpoints running the listed Microsoft Office versions, especially older or unsupported builds, and in environments where users can receive and open Office documents from email, web, or file shares. Treat this as a high-priority legacy Office risk because it has known exploitation and can lead to full endpoint compromise after user interaction. Focus on patch confirmation, legacy Office retirement, and email/document exposure controls. Mitigation focus: Check Microsoft MSRC guidance for CVE-2017-8570 and apply applicable Office updates.; Prioritize remediation on systems running Office 2007, 2010, 2013, or 2016.; Reduce exposure to untrusted Office attachments and externally sourced documents..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.