7.8high
CVE-2016-3235KEVin critical feed1 exploit
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loadin…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
7.8
v3.1 · CNA
CISA KEV
Yes
added 2021-11-03
EPSS
43.3%
percentile 99%
Public exploits
1
Exploit-DB
Summary
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
Known exploited (CISA KEV)
- Added
- 5 y ago
- Due date
- 2022-05-03 (4 y ago)
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Vendor / product
- Microsoft / Office
- CISA name
- Microsoft Office OLE DLL Side Loading Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 20 mo ago
Exploit prediction (EPSS)
43.31% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- EDB-41706 Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-041/MS16-070) (Metasploit) · local · 2015-12-08
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
References
- securify.nl /advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html · x_refsource_MISC, x_transferred
- docs.microsoft.com /en-us/security-updates/securitybulletins/2016/ms16-070 · vendor-advisory, x_refsource_MS, x_transferred
- securityfocus.com /archive/1/538685/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securitytracker.com /id/1036093 · vdb-entry, x_refsource_SECTRACK, x_transferred
- packetstormsecurity.com /files/137490/Microsoft-Visio-DLL-Hijacking.html · x_refsource_MISC, x_transferred
- seclists.org /fulldisclosure/2016/Jun/32 · mailing-list, x_refsource_FULLDISC, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3235 · government-resource
Sources
- CVE List: CVE-2016-3235
- NVD: CVE-2016-3235
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.