CVE-2016-7193KEV · OVERDUE

Microsoft Office Memory Corruption Vulnerability

High · published October 14, 2016

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.1th percentile for exploit probability.

1673
days past CISA
deadline
CVSS v3.1
7.8
EPSS
58%
Percentile
99.1
In the wild
Confirmed
What it is

🚨 Get ready for a wild ride! A crafted RTF document can let attackers pull off remote code execution across multiple Microsoft Office versions. ⚡ Think of it like a sneaky waiter who presents you with a menu item that looks fine but actually contains an unexpected ingredient. Without checking, you might end up with something you didn't order, like a surprise entree of malware! This vulnerability is absolutely devastating! An attacker could exploit this oversight to execute arbitrary code on the user's system, potentially hijacking sensitive information, installing malicious software, or even taking full control of the system. The result? Data breaches, ransomware, and chaos!

Put simply

Think of it like a sneaky waiter who presents you with a menu item that looks fine but actually contains an unexpected ingredient. Without checking, you might end up with something you didn't order, like a surprise entree of malware! CVE-2016-7193 is a memory corruption vulnerability in Microsoft Word that allows attackers to craft specially designed RTF documents that, when opened, can execute malicious code on the host machine.

What to do

This vulnerability is absolutely devastating! An attacker could exploit this oversight to execute arbitrary code on the user's system, potentially hijacking sensitive information, installing malicious software, or even taking full control of the system. The result? Data breaches, ransomware, and chaos! Immediate action is crucial! Ensure that you apply the latest patches from Microsoft for affected versions and consider disabling RTF file support in your email clients and document handling. Regularly educate users on the dangers of opening suspicious documents. 🛡️ You've got this! Stay proactive, follow the steps, and keep your systems secure! 🔥

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.57582 · 99.1th percentile
Published
2016-10-14T01:00Z
KEV added
2022-03-03 · due 2022-03-24
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 14 OCT 01:00Z
    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word…
    cvelistv5