CVE-2016-7193 KEV
7.8
HIGH · CVSS 3.1 · EPSS 57.6% (pctl 99)
Patch first
On CISA KEV — known exploited in the wild, due 2022-03-24.
Description
Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."
Scoring
| CVSS | 7.8 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| EPSS | 57.58% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | yes — remediate by 2022-03-24 |
| Public exploit | none known |
| Published | 2016-10-14 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Microsoft Office Memory Corruption Vulnerability |
|---|---|
| Added | 2022-03-03 |
| Due | 2022-03-24 |
| Vendor / product | Microsoft / Office |
| Ransomware use | none reported |
Affected (4)
| Vendor | Product |
|---|---|
| microsoft | office |
| microsoft | office compatibility pack |
| microsoft | word |
| microsoft | word viewer |
References
- http://www.securityfocus.com/bid/93372
- http://www.securitytracker.com/id/1036984
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-121
- http://www.securityfocus.com/bid/93372
- http://www.securitytracker.com/id/1036984
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-121
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7193
→ the Explorer · watch your stack · NVD