Vulnerability Intelligence Report
Microsoft Office OLE DLL Side Loading Vulnerability
CVE-2016-3235
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:43.43%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-264 ↗CWE-264 (via CISA KEV)
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| microsoft | visio | 2007, 2010, 2013, 2016 |
| microsoft | visio_viewer | 2007, 2010 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Microsoft Corporation · Vendor · USA |
| Reserved | 2016-03-15T00:00:00 |
| Published | 2016-06-16T01:00:00 |
| Patch Date | 2016-06-14 |
| Last Updated | 2025-10-21T23:55:51 |
Community Chatter & Buzz