CVE-2016-7235: Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, and Office Comp...

Security readout for executives and security teams

CVE-2016-7235 is a Microsoft Office memory corruption flaw that can let an attacker run code through a crafted Office document. Business urgency is mainly for organizations still running the listed legacy Office versions, including Word 2007, Office/Word 2010 SP2, Office for Mac 2011 components, and Office Compatibility Pack SP3. Exposure is most likely where legacy Microsoft Office products listed in the CVE remain installed, especially on endpoints handling external documents. The provided bundle does not show exposure for newer Office releases or unsupported products beyond the named set. Prioritize remediation for legacy Office environments because successful exploitation could give an attacker code execution through document handling. Urgency is lower for organizations without the named products, but unsupported Office installations should be treated as a business risk. Mitigation focus: Review Microsoft MS16-133 for the affected Office product and platform.; Apply the vendor security updates listed for the installed Office versions.; Remove or isolate unsupported legacy Office versions where patching is not possible..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.