CVE-2016-3235 Microsoft Office
Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Office OLE DLL Side Loading Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- not known