Veille CVE
CVE-2016-7262
7.8 Élevée Exploitée activementCatalogue CISA KEV — Microsoft Office Security Feature Bypass Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 24/03/2022
Action requise : Apply updates per vendor instructions.
Description
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature Bypass Vulnerability."
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 6.8 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Références
- http://www.securityfocus.com/bid/94660 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037441 Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 PatchVendor Advisory
- http://www.securityfocus.com/bid/94660 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037441 Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 PatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7262 US Government Resource