# CVE-2017-8571: Microsoft Office Security Feature Bypass Vulnerability

CVE-2017-8571 is fixed in 8 products on 1 platform, first by KB3213643, released July 27, 2017. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2017-8571
- Priority: High
- CVSS: n/a (Important)
- EPSS: 0.0578
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Vendor exploitability assessment: Exploitation Less Likely
- Published: Jul 27, 2017
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-8571

## Description

<p>A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.</p> <p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince a user to open the document file and interact with the document by clicking a specific cell.</p> <p>The update addresses the vulnerability by correcting how Microsoft Office handles input.</p>

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Microsoft | Microsoft Outlook 2007 Service Pack 3 |  | [KB3213643](https://patchblox.com/security/data/fix/microsoft/kb3213643.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2010 Service Pack 2 (32-bit editions) |  | [KB2956078](https://patchblox.com/security/data/fix/microsoft/kb2956078.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2010 Service Pack 2 (64-bit editions) |  | [KB2956078](https://patchblox.com/security/data/fix/microsoft/kb2956078.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2013 RT Service Pack 1 |  | [KB4011078](https://patchblox.com/security/data/fix/microsoft/kb4011078.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2013 Service Pack 1 (32-bit editions) |  | [KB4011078](https://patchblox.com/security/data/fix/microsoft/kb4011078.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2013 Service Pack 1 (64-bit editions) |  | [KB4011078](https://patchblox.com/security/data/fix/microsoft/kb4011078.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2016 (32-bit edition) |  | [KB4011052](https://patchblox.com/security/data/fix/microsoft/kb4011052.md) | Jul 27, 2017 |
| Microsoft | Microsoft Outlook 2016 (64-bit edition) |  | [KB4011052](https://patchblox.com/security/data/fix/microsoft/kb4011052.md) | Jul 27, 2017 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo