VYPR
← All advisories
High severity7.1NVD Advisory· Published Dec 20, 2016· Updated Jun 17, 2026

CVE-2016-7290

CVE-2016-7290

Description

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7291.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Microsoft/Office
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • Microsoft/Office Compatibility Pack2 versions
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
    • (no CPE)range: SP3
  • Microsoft/Office Web Apps2 versions
    cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
    • (no CPE)range: 2010 SP2
  • Microsoft/Sharepoint Server2 versions
    cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
    • (no CPE)range: 2010 SP2
  • Microsoft/Word2 versions
    cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
  • Microsoft/Word Automation Services
    cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*
  • Microsoft/Word For Mac2 versions
    cpe:2.3:a:microsoft:word_for_mac:2011:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:word_for_mac:2011:*:*:*:*:*:*:*
    • (no CPE)range: 2011
  • Microsoft/Word 2007llm-fuzzy
    Range: SP3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.