Skip to content

CVE-2016-7277 Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

CriticalCVSS 9.6 EPSS 18.1%
Published
Updated
Exploit status
No public exploit known

Description

Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

ProductAffected versionsFixed in
Microsoft office = 2016 No fix listed

References

  • 94715 third-party-advisory vdb-entry
  • 1037441 third-party-advisory vdb-entry
  • MS16-148 vendor-advisory