CVE-2017-11934

medium Microsoft
CVSS v3 Base Score
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
23.5%
Exploitation probability in 30 days
Top 4% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Published: December 12, 2017 (3075 days ago)
Last Modified: May 13, 2026
Vendor: Microsoft
Source: NVD

Description

Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".

CWE

CWE-200

Affected Products

microsoft office

References

🔗 www.securityfocus.com 🔗 www.securitytracker.com 🔗 portal.msrc.microsoft.com 🔗 www.securityfocus.com 🔗 www.securitytracker.com