CVE-2016-7276
high · 7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
7.1
CVSS
25.1%
EPSS (exploit prob.)
98th
EPSS percentile
2016-12-20
Published
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Weaknesses
CWE-125
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | office | 2007 |
| microsoft | office | 2010 |
| microsoft | office | 2013 |
| microsoft | office_for_mac | 2011 |
| microsoft | office_for_mac | 2016 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/94666
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
- http://www.securityfocus.com/bid/94666
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-7276