Actively exploited · Published Jun 16, 2016 · Assigned by microsoft

CVE-2016-3235

High 7.8 Exploited

In plain English

A high-severity security flaw in Office from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). The chance it is exploited in the next 30 days is estimated at 43.3% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)43.3%top 1.3% of all CVEs

Exploited in the wildYesCISA KEV since Nov 3, 2021

Attack tooling1Metasploit

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by May 3, 2022.

Official description

Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html x_refsource_MISC
MS16-070 vendor-advisory, x_refsource_MS
20160615 Microsoft Visio multiple DLL side loading vulnerabilities mailing-list, x_refsource_BUGTRAQ
1036093 vdb-entry, x_refsource_SECTRACK
http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html x_refsource_MISC
20160615 Microsoft Visio multiple DLL side loading vulnerabilities mailing-list, x_refsource_FULLDISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3235 government-resource