coldbraid

CVE-2017-11774 Microsoft Office

Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.

CVSS
not scored

CWE-119

On CISA’s exploited list

Microsoft Office Outlook Security Feature Bypass Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)