CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-06-16
Microsoft Visio OLE DLL Side Loading Local Privilege Escalation Vulnerability (CVE-2016-3235, MS16-070)
[Affected Scope] Microsoft Visio 2007 SP3, 2010 SP2, 2013 SP1, 2016, and Visio Viewer 2007/2010
[Impact] Local attackers can execute arbitrary code and escalate privileges by tricking a user into opening a Visio file from a directory containing a malicious DLL
[Mitigation] Apply the official Microsoft MS16-070 security update and restrict insecure DLL search paths via registry modifications