CVE-2017-8570 Microsoft Office

CVSS

not scored

On CISA’s exploited list

Microsoft Office Remote Code Execution Vulnerability

Added

2022-02-25

Federal patch deadline

2022-08-25

Ransomware use

not known

Actors known to use it (MITRE ATT&CK)

• PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
• Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques

NVDCVE.orgAll exploited vulnerabilities