CVE-2017-11882

CVE-2017-11882 is a memory corruption vulnerability affecting Microsoft Office 2007 through 2016 that arises from the software's failure to properly handle objects in memory. Rated High severity with a CVSS score of 7.8, this flaw allows attackers to execute arbitrary code with the privileges of the current user, though it requires user interaction such as opening a malicious document. Despite being an older vulnerability, it remains a critical threat listed in the CISA Known Exploited Vulnerabilities catalog, with public exploit code available in Metasploit and continued active use in malware campaigns delivering ransomware and infostealers.