Information Disclosure Vulnerability in Microsoft Word Products
CVE-2016-7268
7.1HIGH
Key Information:
- Vendor
- Microsoft
- Vendor
- CVE Published:
- 20 December 2016
Summary
Microsoft Office products, including various versions of Microsoft Word and Office Web Apps, are susceptible to an information disclosure vulnerability. Attackers can exploit this flaw by crafting malicious documents that enable them to access sensitive information from process memory or induce a denial of service condition. This vulnerability can occur in multiple environments, affecting various applications, which highlights the importance of regular updates and proper security measures to mitigate potential risks.
References
EPSS Score
9% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved