CVE-2017-0261

CVE-2017-0261 is a critical remote code execution vulnerability affecting Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016, stemming from improper memory object handling. With a CVSS score of 7.8 (HIGH), it allows unauthenticated attackers to execute arbitrary code if a user opens a malicious file, leading to high confidentiality, integrity, and availability impacts. This vulnerability is actively exploited in the wild, as evidenced by its inclusion in CISA's KEV catalog and high EPSS score, despite a lack of public exploit code on platforms like Metasploit or ExploitDB. Significant community discussion and media coverage highlight its widespread attention and the urgency for patching.