Back to search
CVE-2017-11774
Published: Oct 13, 2017
Modified: Oct 21, 2025
PUBLISHED
Description
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
| Vendor | Product | Versions |
|---|---|---|
Microsoft Corporation | Microsoft Outlook | affected Microsoft Outlook 2010 SP2affected Outlook 2013 SP1 and RT SP1affected Outlook 2016 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now