VulnerabilityModified
CVE-2016-7263
Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
HIGH 7.8EPSS 19.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 19.1%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 19.15% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- microsoft/excel for mac
- Source
- secure@microsoft.com
References
- http://www.securityfocus.com/bid/94668Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037441Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
- http://www.securityfocus.com/bid/94668Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037441Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.