CVE-2016-0010

HIGH

Microsoft Office and Excel for Mac - Remote Code Execution via Crafted Office Document

Title source: llm
STIX 2.1

Description

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034651

Scores

CVSS v3 7.8
EPSS 0.2161
EPSS Percentile 97.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (11)
microsoft/excel_for_mac 2011
microsoft/excel_for_mac 2016
microsoft/office 2007 sp3
microsoft/office 2010 sp2 (2 CPE variants)
microsoft/office 2013 sp1
microsoft/office 2016
microsoft/powerpoint_for_mac 2011
microsoft/powerpoint_for_mac 2016
microsoft/word_for_mac 2011
microsoft/word_for_mac 2016
... and 1 more
Published Jan 13, 2016
Tracked Since Feb 18, 2026