CVE-2016-3235
- State
- Published
- Severity
- 7.8 High
- Published
- Jun 16, 2016
- Updated
- Oct 21, 2025
- Reserved
- Mar 15, 2016
Description
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html
- MS16-070vendor-advisory
- 20160615 Microsoft Visio multiple DLL side loading vulnerabilitiesmailing-list
- 1036093vdb-entry
- http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html
- 20160615 Microsoft Visio multiple DLL side loading vulnerabilitiesmailing-list
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3235government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.