CVE-2016-7262
HIGH
7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
MEDIUM
6,8
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial
Description
AI Translation Available
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka 'Microsoft Office Security Feature Bypass Vulnerability.'
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,8709
Percentile
1,0th
Updated
EPSS Score Trend (Last 91 Days)
Application
Excel by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Excel by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Office Compatibility Pack by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Excel by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Excel by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Excel by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Excel Viewer by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:excel_viewer:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016…
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-1…
http://www.securityfocus.com/bid/94660
http://www.securitytracker.com/id/1037441
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-1…
http://www.securityfocus.com/bid/94660
http://www.securitytracker.com/id/1037441