Vendor / Project: Microsoft Product: Office Description: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. Required Action: Apply updates per vendor instructions. Due Date: 2022-03-24 Ransomware Campaign Use: Unknown CWEs: CWE-119 Notes: https://nvd.nist.gov/vuln/detail/CVE-2017-11826