CyberSec.Space Logo
Back to CVE Browser

CVE-2016-7193

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score28.5680%
EPSS Percentile92.16th
PublishedOct 14, 2016
Last ModifiedApr 22, 2026

Vulnerability Description

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected Platforms (CPE)

📦
Microsoft

Office

= 2007
📦
Microsoft

Office

= 2010
📦
Microsoft

Office

= 2016
📦
Microsoft

Office Compatibility Pack

All versions
📦
Microsoft

Word

= 2010
📦
Microsoft

Word

= 2011
📦
Microsoft

Word

= 2013
📦
Microsoft

Word

= 2013
📦
Microsoft

Word

= 2016
📦
Microsoft

Word Viewer

All versions

References & Advisories

🔗 http://www.securityfocus.com/bid/93372
🔗 http://www.securitytracker.com/id/1036984
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-121
🔗 http://www.securityfocus.com/bid/93372
🔗 http://www.securitytracker.com/id/1036984
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-121
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7193

Related Vulnerabilities

CVE-2001-122310.0

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers...

CVE-2001-126010.0

Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator pri...

CVE-2000-085410.0

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.d...

CVE-2007-111710.0

Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspeci...