CVE-2017-0281: office 2016; +8 more affected products

Affected technology

office · 2007 · update sp3
microsoft

office · 2010 · update sp2
microsoft

office · 2013 · update sp1
microsoft

office · 2016
microsoft

office online server · 2016
microsoft

office web apps · 2010 · update sp2
microsoft

office web apps · 2013 · update sp1
microsoft

project server · 2013 · update sp1
microsoft

sharepoint foundation · 2013 · update sp1
microsoft

sharepoint server · 2010 · update sp2
microsoft

sharepoint server · 2013 · update sp1
microsoft

sharepoint server · 2016
microsoft

skype for business · 2016
microsoft

word · 2016
microsoft

Microsoft Office · Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016.
Microsoft Corporation

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.0): Local · No privileges required · User interaction required

What an attacker can do

The source reports that an attacker could run code remotely under the conditions described by the source. NVD’s CVSS 3.0 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.