CVE-2017-0262

Microsoft Office contained a remote code execution vulnerability that was actively exploited in the wild.

CVE-2017-0262 allowed attackers to execute arbitrary code remotely through Microsoft Office, a critical failure for DIB organizations relying on Office for daily operations. The vulnerability was in the KEV catalog, proving it was exploited in the wild, which means attackers were actively using it to compromise systems. DIB orgs must ensure all Office products are patched to the latest version and monitor for exploitation attempts.

Shame score — A known RCE vulnerability in a ubiquitous productivity tool was actively exploited in the wild, demonstrating severe negligence in patch management and leaving organizations vulnerable to widespread compromise.