CVE-2016-7244: Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a cra...

Security readout for executives and security teams

CVE-2016-7244 is a Microsoft Office 2007 SP3 issue where a specially crafted Office document can make the application hang. The public bundle describes denial of service only, not data theft or code execution. Business urgency depends on whether Office 2007 SP3 remains in use and handles untrusted documents. Exposure is likely limited to environments still running Microsoft Office 2007 SP3 and opening externally supplied Office documents. The supplied affected-product metadata is sparse, so validate against Microsoft MS16-133 before scoping beyond Office 2007 SP3. Treat this as a moderate availability risk where legacy Office 2007 SP3 remains deployed. It is not sourced as actively exploited, but unsupported or unpatched document-handling software can disrupt users and create operational drag. Mitigation focus: Inventory endpoints for Microsoft Office 2007 SP3 installations.; Review Microsoft MS16-133 for vendor-approved updates or workarounds.; Prioritize reducing exposure to untrusted Office documents on affected systems..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.