CVE-2016-0141 — Vulnerability intelligence

microsoft — office

Published: 2016-09-14T10:59:03.320

CVSS

6.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."

Sources

• CVE-2016-0141
• Original advisory