CVE Vulnerabilities

CVE-2016-7275

Published: Dec 20, 2016 | Modified: Oct 30, 2018
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka Microsoft Office OLE DLL Side Loading Vulnerability.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2010 2010
Office Microsoft 2013 2013
Office Microsoft 2016 2016

References