Vulnerability · NVD
CVE-2016-3313
CVE-2016-3313, high severity (CVSS 7.8): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- 7.8
- Exploitation
- 49.8 %
- Tracked apps
- 2
- Still exposed
- 0
NVD scale
EPSS, predicted over 30 days
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
Attack vector : Local
No privileges required
Show raw CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
49.83%
moderate exploit risk
percentile 98.9%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
-
Affected - Fixed in - Latest tracked - undetermined
Vulnerable CPE configurations (8)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2010:sp2:x86:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:* |
| microsoft |
office All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.