CVE-2017-8509: office 2016; +8 more affected products

Affected technology

office · 2007 · update sp3
microsoft

office · 2010 · update sp2
microsoft

office · 2013 · update sp1
microsoft

office · 2016
microsoft

office compatibility pack · Version not applicable in the source CPE
microsoft

office web apps · 2010
microsoft

office web apps server · 2013
microsoft

onenote · 2010
microsoft

sharepoint server · 2010 · update sp2
microsoft

sharepoint server · 2013 · update sp1
microsoft

sharepoint server · 2016
microsoft

word · 2007 · update sp3
microsoft

word · 2010 · update sp2
microsoft

word · 2013 · update sp1
microsoft

word · 2016
microsoft

word for mac · 2016
microsoft

Microsoft Office · Microsoft Office 2007 Service Pack 3, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Word 2007, Microsoft Office 2010 Service Pack 2, Microsoft Word 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Word 2013 RT Service Pack 1, Microsoft OneNote 2010 Service Pack 2, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, and Microsoft Word 2016
Microsoft Corporation

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.0): Network (remote) · No privileges required · User interaction required

What an attacker can do

The source reports that an attacker could run code remotely under the conditions described by the source. NVD’s CVSS 3.0 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.