CVE Feed

    Dashboard / CVE / CVE-2016-7291

    CVE-2016-7291

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7290.

    Published:Dec 20, 2016
    Last Modified:Apr 12, 2025
    EPS:Dec 20, 2016
    EPSS Score:0.09192
    CVSS Score:7.1

    Affected Products

    Vendor
    Microsoft
    Product
    Office
    Vendor
    Microsoft
    Product
    Office Compatibility Pack
    Vendor
    Microsoft
    Product
    Office Web Apps
    Vendor
    Microsoft
    Product
    Sharepoint Server
    Vendor
    Microsoft
    Product
    Word
    Vendor
    Microsoft
    Product
    Word Automation Services
    Vendor
    Microsoft
    Product
    Word For Mac

    Exploits

    No exploit reference

    Common Weakness Enumeration

    Common Attack Pattern Enumeration and Classification (CAPEC)

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High