CVE-2017-11774

Severity

HIGH

CVSS

7.8

EPSS

0.59893

Risk score

77.16

CISA KEV

Yes

PoC

Published

2021-11-03

Modified

2021-11-03

First seen

2026-08-07

Aliases

EUVD-2017-3382, GHSA-9CQ3-GR97-QXF7

Products

Microsoft Corporation:Microsoft Outlook Microsoft Outlook 2010 SP2, Microsoft Corporation:Microsoft Outlook Outlook 2013 SP1 and RT SP1, Microsoft Corporation:Microsoft Outlook Outlook 2016, Microsoft:Office

Sources

euvd EUVD-2017-3382
cisa.gov CVE-2017-11774

Description

Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2017-11774
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3382
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774
http://www.securityfocus.com/bid/101098
http://www.securitytracker.com/id/1039542
https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/