CVE-2016-0126

CVSS 3.0: 7.8 high
EPSS: 20%p97
Published: May 11, 2016 · May 11, 2016
Modified: Jun 17, 2026

Analyze CVE-2016-0126 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Vendors: microsoft

Products: office

Weakness: CWE-119

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.6%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosMay 10, 20:39 UTC · May 10, 2016VulnerabilityExploitedCVE-2016-0187 CVE-2016-0189 CVE-2016-0192+283