CVE-2017-11825

CVE-2017-11825 is a remote code execution vulnerability affecting Microsoft Office 2016 Click-to-Run and Office 2016 for Mac, allowing an attacker to execute arbitrary code via a specially crafted file. With a CVSS score of 7.8 (High), it requires user interaction (UI:R) but has low attack complexity (AC:L), potentially leading to high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, its high EPSS and FAUCET risk scores indicate significant exploitability potential, despite no public exploit code being available on Metasploit or ExploitDB. The vulnerability received limited community discussion and media coverage, primarily noted in Microsoft's October Patch Tuesday.