Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-7276

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."

Published

2016-12-20T06:59:00.873

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.1 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

4.9

Weaknesses

Type: Primary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	microsoft	office	2007	Yes
Application	microsoft	office	2010	Yes
Application	microsoft	office	2013	Yes
Application	microsoft	office_for_mac	2011	Yes
Application	microsoft	office_for_mac	2016	Yes

References

http://www.securityfocus.com/bid/94666 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1037441 Third Party Advisory, VDB Entry ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 ([email protected])
http://www.securityfocus.com/bid/94666 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1037441 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 (af854a3a-2127-422b-91ae-364da2661108)