Skip to content

CVE-2016-7266 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows us...

HighCVSS 7.8 EPSS 22.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a document, aka "Microsoft Office Security Feature Bypass Vulnerability."

Affected products

ProductAffected versionsFixed in
Microsoft excel = 2007-sp3 No fix listed
Microsoft excel = 2010-sp2 No fix listed
Microsoft excel = 2013-sp1 No fix listed
Microsoft excel = 2016 No fix listed
Microsoft excel for mac = 2016 No fix listed
Microsoft excel viewer All versions No fix listed
Microsoft office compatibility pack All versions No fix listed

References

  • 94662 third-party-advisory vdb-entry
  • 1037441 third-party-advisory vdb-entry
  • MS16-148 vendor-advisory