CVE-2016-3313 EXPLOIT
7.8
HIGH · CVSS 3.0 · EPSS 49.8% (pctl 99)
Patch early
A public exploit exists.
Description
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
Scoring
| CVSS | 7.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| EPSS | 49.83% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2016-08-09 |
| Last modified | 2026-06-17 |
Affected (3)
| Vendor | Product |
|---|---|
| microsoft | office |
| microsoft | word for mac |
| microsoft | word viewer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Word 2007/2010/2013/2016 - Out-of-Bounds Read Code Execution (MS16-099) | 2016-08-10 |
References
- http://www.securityfocus.com/bid/92289
- http://www.securitytracker.com/id/1036559
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099
- https://www.exploit-db.com/exploits/40224/
- http://www.securityfocus.com/bid/92289
- http://www.securitytracker.com/id/1036559
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099
- https://www.exploit-db.com/exploits/40224/
→ the Explorer · watch your stack · NVD