CVE-2017-11935: Microsoft Office

High severity, CVSS 7.8. EPSS: 18.9% chance of exploitation in the next 30 days.

Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability".

Affected products

• Microsoft Office: version 2016 only

Published 2017-12-12. Last modified 2026-06-17.