CVE-2016-7275: Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local u...

Security readout for executives and security teams

This is a Microsoft Office privilege-escalation issue from 2016. A local user could abuse how Office loads libraries through a crafted application to gain higher privileges. It is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most likely on endpoints still running the affected Microsoft Office versions, especially systems where local users can run untrusted applications. The provided bundle does not include CPE precision, CVSS, or detailed build-level applicability. Treat this as a legacy endpoint hygiene and privilege-escalation risk. It is below externally exploitable critical issues, but affected Office installations should be patched or retired because local privilege escalation can support broader compromise after initial access. Mitigation focus: Review Microsoft MS16-148 and apply the applicable Office security update.; Inventory Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 installations.; Prioritize endpoints that allow local interactive users or untrusted application execution..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.