Palo Alto Networks Unit 42 Vulnerability Research May 2017 Disclosures
Summary: Palo Alto Networks Unit 42 researchers disclosed two code execution vulnerabilities affecting Microsoft Office that Microsoft addressed in its May 2017 monthly security update. Palo Alto Networks released IPS signatures for Threat Prevention subscribers and stated that its Traps endpoint product can block memory corruption-based exploits of this nature.
Key Takeaway: Two Office code execution flaws were fixed in a single monthly patch cycle, and the vendor's own protections only reached customers holding a Threat Prevention subscription or running Traps - leaving everyone else exposed until they applied Microsoft's update.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026