Information Disclosure Vulnerability in Microsoft Office Products

CVE-2016-7233

Summary

A vulnerability exists in multiple Microsoft Office products that allows remote attackers to exploit sensitive information from process memory. This occurs through specially crafted Office documents, potentially leading to unauthorized information disclosure or denial of service through an out-of-bounds read. Affected versions include Microsoft Word 2007, Office 2010 SP2, Word for Mac 2011, among others. Users are advised to update their products to mitigate the risk of exploitation.

References