EXPOSURES › CVE-2016-7193
CVE-2016-7193
HIGH ⌖ ON CISA KEV · EXPLOITEDA memory corruption flaw in Microsoft Office allowed remote code execution and was actively exploited in the wild.
This unpatched vulnerability enabled attackers to execute arbitrary code remotely, directly violating CMMC/NIST 800-171 requirements for patch management and system integrity. DIB organizations must ensure all Office applications are patched immediately and monitor for exploitation attempts, as this flaw was known and active in the KEV catalog.
Shame score — A known memory corruption vulnerability was left unpatched and actively exploited in the wild, demonstrating negligence in patch management and exposing systems to remote code execution.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |