Information Disclosure Vulnerability in Microsoft Excel and Office Products
CVE-2016-7265

7.1HIGH

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
20 December 2016

Summary

This vulnerability allows remote attackers to exploit Microsoft Excel and associated Office products by crafting malicious documents that facilitate unauthorized access to sensitive information stored in process memory. Additionally, it can lead to denial of service through an out-of-bounds read, posing a serious risk to users across multiple versions of Excel and Office compatibility pack products. Users should remain vigilant and apply necessary updates to safeguard against this ongoing threat.

References

EPSS Score

11% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.