High severity8.8NVD Advisory· Published May 11, 2016· Updated May 6, 2026

CVE-2016-0183

Description

The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."

Affected products

Microsoft/Office
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
Microsoft/Office Web Apps
cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
Microsoft/Sharepoint Server
cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
Microsoft/Word
cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securitytracker.com/id/1035819nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-054nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.032
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000