EXPOSURES › CVE-2017-0222
CVE-2017-0222
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Internet Explorer had a remote code execution vulnerability that was actively exploited in the wild.
A remote code execution flaw in Internet Explorer allowed attackers to execute arbitrary code on affected systems. DIB organizations must ensure legacy browsers are patched or disabled, as unpatched RCE vulnerabilities are high-priority compliance risks under NIST 800-171. This failure is not a zero-day and does not involve ransomware.
Shame score — The vulnerability was actively exploited in the wild and remained unpatched for a significant period, representing a negligent failure to address a known, high-severity RCE flaw.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |