CVE-2017-8631

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744.

• http://www.securityfocus.com/bid/100751Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039315Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8631Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100751Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039315Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8631Patch, Vendor Advisory

Published

Sep 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8624CLFS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…
• CVE-2017-8625Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and …
• CVE-2017-8627Windows Subsystem for Linux in Windows 10 1703, allows a den…
• CVE-2017-8628Microsoft Bluetooth Driver in Windows Server 2008 SP2, Windo…
• CVE-2017-8629Microsoft SharePoint Server 2013 Service Pack 1 allows an el…
• CVE-2017-8630Microsoft Office 2016 allows a remote code execution vulnera…
• CVE-2017-8632A remote code execution vulnerability exists in Microsoft Ex…
• CVE-2017-8633Windows Error Reporting (WER) in Windows Server 2008 SP2 and…
• CVE-2017-8634Microsoft Edge in Microsoft Windows 10 1703 allows an attack…
• CVE-2017-8635Microsoft browsers in Microsoft Windows 7 SP1, Windows Serve…
• CVE-2017-8636Microsoft browsers in Microsoft Windows 7 SP1, Windows Serve…
• CVE-2017-8637Microsoft Edge in Microsoft Windows 10 1703 allows an attack…