CVE-2016-3357

CVE Database · CVE-2016-3357

CVE-2016-3357

· N/AModified

CVSS v3.1

N/A

EPSS

54.81%

Published

Sep 14, 2016

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Office PowerPoint 2010 - Invalid Pointer Reference TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Weaknesses (CWE)

CWE-119

Affected Products (11)

microsoft · officevulnerable

microsoft · office_web_appsvulnerable

microsoft · office_web_apps_servervulnerable

microsoft · sharepoint_foundationvulnerable

microsoft · word_for_macvulnerable

References (8)

http://www.securityfocus.com/bid/92786

http://www.securitytracker.com/id/1036785

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107

https://www.exploit-db.com/exploits/40406/

http://www.securityfocus.com/bid/92786

http://www.securitytracker.com/id/1036785

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107

https://www.exploit-db.com/exploits/40406/

KEV Catalog EPSS Scores Vendors All CVEs