CVE-2017-8725: Microsoft Publisher

High severity, CVSS 7.8. EPSS: 20.3% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution".

Affected products

• Microsoft Publisher: version 2007 only; version 2010 only

Published 2017-09-13. Last modified 2026-06-17.