Information Disclosure Vulnerability in Microsoft Word Products
CVE-2016-7268

7.1HIGH

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
20 December 2016

Summary

Microsoft Office products, including various versions of Microsoft Word and Office Web Apps, are susceptible to an information disclosure vulnerability. Attackers can exploit this flaw by crafting malicious documents that enable them to access sensitive information from process memory or induce a denial of service condition. This vulnerability can occur in multiple environments, affecting various applications, which highlights the importance of regular updates and proper security measures to mitigate potential risks.

References

EPSS Score

9% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.