EXPOSURES › CVE-2017-8570
CVE-2017-8570
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Office contained an unpatched remote code execution vulnerability that was actively exploited in the wild.
CVE-2017-8570 allowed attackers to execute arbitrary code on systems running Microsoft Office by exploiting improper memory handling. DIB organizations must ensure all Office applications are patched and monitored for KEV-listed vulnerabilities to prevent compromise. This failure highlights the risk of relying on unpatched software and the necessity of continuous vulnerability management.
Shame score — A known, unpatched RCE vulnerability in widely deployed software was actively exploited in the wild, demonstrating severe negligence in patch management and software supply chain security.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
"A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory."
"Gilco Scaffolding was named on a ransomware group's data-leak site."
"CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws."
"Protect your identity from theft and misuse."
"McKesson Data Leak Includes 6.4M Email Addresses"
"McKesson Data Breach - Have I Been Pwned"
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |