CVE-2016-3235

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2016/Jun/32Broken Link, Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/538685/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036093Broken Link, Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070Patch, Vendor Advisory
https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.htmlExploit, Third Party Advisory
http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2016/Jun/32Broken Link, Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/538685/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036093Broken Link, Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070Patch, Vendor Advisory
https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.htmlExploit, Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3235US Government Resource

Timeline

Published: Jun 16, 2016
Last modified: Jun 17, 2026
Added to CISA KEV: Nov 3, 2021
NVD status: Analyzed

Related CVEs from 2016

CVE-2016-32369.8The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP CVE-2016-32377.5Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Wi CVE-2016-32388.1The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201 CVE-2016-32397.8The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201 CVE-2016-32407.5Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) CVE-2016-32417.5Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) CVE-2016-32427.5Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) CVE-2016-32437.5Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via CVE-2016-32444.3Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature CVE-2016-32456.5Microsoft Internet Explorer 9 through 11 allows remote attackers to trick users into making TCP connections to a restricted port via a craft CVE-2016-32467.5Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak CVE-2016-32477.5Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr