Microsoft · Excel
CVE-2016-7262
Microsoft Office Security Feature Bypass Vulnerability
Qué es
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature Bypass Vulnerability."
CISA: A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 24 de marzo de 2022
Más fallos explotados de Microsoft
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 3 mar 2022 | Featheader Record Memory Corruption | Excel | Alto 7,8 | 84% |
| 3 mar 2022 | Remote Code Execution | Excel | Alto 8,8 | 22% |
| 13 oct 2026 | Command Injection | Windows | Alto 8,8 | 9,8% |
| 25 sept 2026 | Code Injection | SharePoint | Alto 8,8 | 8,2% |
| 8 sept 2026 | Link Following | Windows | Alto 7,8 | 0,4% |
| 8 sept 2026 | Heap-Based Buffer Overflow | Windows | Alto 7,8 | 0,4% |
| 26 ago 2026 | Remote Code Execution | SQL Server | Alto 8,8 | 57% |
| 18 ago 2026 | Double Free | Internet Key Exchange (IKE) Service Extensions | Crítica 9,8 | 77% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.