← ExploitWatch
HomeExploited Vulnerabilities

CVE-2017-0199 — Actively Exploited: Office and WordPad (Microsoft)

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

CVE IDCVE-2017-0199
VendorMicrosoft
ProductOffice and WordPad
Vulnerability nameMicrosoft Office and WordPad Remote Code Execution Vulnerability
Date added2021-11-03
Remediation due2022-05-03
Known ransomware useKnown
Required actionApply updates per vendor instructions.
DescriptionMicrosoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →