CVE-2016-3234
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint
CVSS
5.5
Medium
EPSS
26.5%
p98
KEV
—
Exploit Today
29
0-100
Published: Jun 16, 2016 · Last modified: Oct 15, 2026 · CWE-200
24.1%EPSS · 30 days26.5%
2026-10-142026-11-11
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."
- www.securitytracker.comhttp://www.securitytracker.com/id/1036093
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070
- www.securitytracker.comhttp://www.securitytracker.com/id/1036093
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-126920——
———Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)2hCVE-2026-126882——
———Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)2hCVE-2026-126878——
———Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)2hCVE-2026-126327——
———Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to view passwords to obtain historical entry passwords via the connection history API.3hCVE-2026-0331——
———An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface.
Panorama is not affected by this vulnerability.5hCVE-2026-575006.3 MED—
———REVA is an interoperability platform. Prior to versions 2.40.5 and 2.46.4, Reva exposes internal metadata folders in the spaces of an authenticated user. This can lead to unwanted ways of interaction with the data. This issue has been patched in versions 2.40.5 and 2.46.4.6h