CVE-2016-7277: Microsoft Office

Critical severity, CVSS 9.6. EPSS: 18% chance of exploitation in the next 30 days.

Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

• Microsoft Office: version 2016 only

Published 2016-12-20. Last modified 2026-06-17.