CVE-2016-7264
high · 7.1Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
7.1
CVSS
23.2%
EPSS (exploit prob.)
98th
EPSS percentile
2016-12-20
Published
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Weaknesses
CWE-125
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | excel | 2007 |
| microsoft | excel_for_mac | 2011 |
| microsoft | excel_for_mac | 2016 |
| microsoft | excel_viewer | all versions |
| microsoft | office_compatibility_pack | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/94769
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
- http://www.securityfocus.com/bid/94769
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-7264