{"id":"CVE-2016-0141","title":"The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, a…","summary":"The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, a…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"vendor":"microsoft","product":"office","affected":["office = 2007","office = 2010","office = 2013","office = 2016"],"published":"2016-09-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T16:17:11.217","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2016-0141","references":[{"url":"http://www.securityfocus.com/bid/92903","label":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1036785","label":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107","label":"secure@microsoft.com"},{"url":"http://www.securityfocus.com/bid/92903","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036785","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"epss":0.04897,"epssPercentile":0.91951,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T15:09:50.322642Z"},"ingestedAt":"2026-10-15T16:13:11.739Z","slug":"CVE-2016-0141","body":"## Overview\n\nThe Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka \"Microsoft Information Disclosure Vulnerability.\"\n\n## Affected\n\n- `office = 2007`\n- `office = 2010`\n- `office = 2013`\n- `office = 2016`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":35.8,"likelihood":1,"exploitation":0,"ransomware":0},"changes":[{"seq":222559,"id":"CVE-2016-0141","ts":1792084743875,"field":"cvss","old":null,"new":"6.5"},{"seq":222558,"id":"CVE-2016-0141","ts":1792084743875,"field":"severity","old":"none","new":"medium"}]}