← Vulnerability feed

Vulnerability record · CVE-2017-8567 · published 13 September 2017

CVE-2017-8567: Microsoft excel for mac memory buffer overflow vulnerability

Microsoft · Excel For Mac

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution".

7.8 CVSS 3.0 High EPSS 20% · top 2.6% CWE-119 · Memory buffer overflow
7.8CVSS 3.0 base score, v2 9.3
20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution".

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/100719 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039315 Third Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8567 PatchVendor Advisory
http://www.securityfocus.com/bid/100719 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039315 Third Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8567 PatchVendor Advisory

Track CVE-2017-8567 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2015-6122Microsoft excel memory buffer overflow vulnerabilityMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbit…EPSS 14%9.3CVE-2015-6040Microsoft excel memory buffer overflow vulnerabilityMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attack…EPSS 14%9.3CVE-2015-6094Microsoft excel memory buffer overflow vulnerabilityMicrosoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Ser…EPSS 21%9.3CVE-2015-6038Microsoft excel memory buffer overflow vulnerabilityMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility…EPSS 36%9.3CVE-2015-2558Microsoft excel vulnerabilityUse-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 20…EPSS 20%9.3CVE-2015-2555Microsoft excel vulnerabilityUse-after-free vulnerability in Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and …EPSS 20%7.8CVE-2017-8632Microsoft excel memory buffer overflow vulnerabilityA remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Ser…EPSS 18%7.8CVE-2016-7263Microsoft excel for mac memory buffer overflow vulnerabilityMicrosoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…EPSS 19%

Source: NIST National Vulnerability Database (record CVE-2017-8567), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.