CVE-2017-0199

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Office and WordPad
Date Added 2021-11-03
Remediation Due 2022-05-03
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2017-0199

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →