Vulnerability Database

324,311

Total vulnerabilities in the database

CVE-2016-0057

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows local users to gain privileges via a Trojan horse file with a crafted signature, aka "Microsoft Office Security Feature Bypass Vulnerability."

  • Published: Mar 9, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-0057
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
microsoft / office 2007-sp3 2007-sp3.x
microsoft / office 2013-sp1 2013-sp1.x
microsoft / office 2010-sp2 2010-sp2.x
microsoft / office 2016 2016.x