CVE-2016-0183: The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoin...

Security readout for executives and security teams

This vulnerability lets an attacker potentially run code by getting an affected Microsoft Office 2010 or SharePoint-related component to process a malicious document with an embedded font. Business risk is highest where legacy Office 2010 or SharePoint 2010 services still handle documents from email, uploads, or external users. Exposure is likely limited to environments still running the listed 2010 Microsoft Office, SharePoint, Word Automation Services, or Office Web Apps components, especially where they open or render untrusted documents. Treat as high priority if any affected 2010 Microsoft document-processing software remains in use. Remote code execution through documents can support phishing, server compromise, or lateral movement, but current exploitation evidence is not provided in the bundle. Mitigation focus: Apply Microsoft’s MS16-054 security updates according to the vendor advisory.; Prioritize systems that process external Office documents or SharePoint uploads.; Restrict handling of untrusted documents on affected legacy systems until patched..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.