High severity · published Jun 16, 2016
CVE-2016-3235
Microsoft Office OLE DLL Side Loading Vulnerability
In wildKEV
7.8
CVSS
43.3%
EPSS
Yes
On KEV
Description
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)43.3% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 3, 2021
Federal remediation dueMay 3, 2022
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
All versions, or not specified · source: KEV
VI
Visio · Microsoft
2007; 2010; 2013; 2016 · source: NVD
VV
Visio Viewer · Microsoft
2007; 2010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-3235
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-3235
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html
vendor-advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070
mailing-list
http://www.securityfocus.com/archive/1/538685/100/0/threaded
vdb-entry
http://www.securitytracker.com/id/1036093
x_refsource_MISC
http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html
mailing-list
http://seclists.org/fulldisclosure/2016/Jun/32
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability