CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-10-14
Microsoft Office and Word Memory Corruption Remote Code Execution Vulnerability (CVE-2016-7193, MS16-121)
[Affected Scope] Microsoft Word 2007 to 2016, Word for Mac 2011/2016, Word Automation Services on SharePoint Server, Office Web Apps, and Office Online Server.
[Impact] Remote attackers can execute arbitrary code under the security context of the current user by tricking them into opening a specially crafted RTF document.
[Mitigation] Apply the official MS16-121 security updates immediately, or implement File Block policies via Registry/GPO to restrict RTF document parsing.