CVE-2016-0136

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Sharepoint Foundation
Sharepoint Designer
Office Compatibility Pack
Excel
Vendor
CVE Published:
12 April 2016

Summary

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
https://www.verisign.com/en_US/security-services/security...
third-party-advisoryx_refsource_IDEFENSE
http://www.securitytracker.com/id/1035525
vdb-entryx_refsource_SECTRACK

EPSS Score

54% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.