CVE-2017-0019: Microsoft Word

High severity, CVSS 7.8. EPSS: 16.6% chance of exploitation in the next 30 days.

Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.

Affected products

• Microsoft Word: version 2016 only

Published 2017-03-17. Last modified 2026-06-17.