CVE-2016-0137

CVE-2016-0137 describes an ASLR bypass vulnerability within the Click-to-Run (C2R) implementation of Microsoft Office 2013 SP1 and 2016, allowing local users to circumvent Address Space Layout Randomization through a specially crafted application. This vulnerability has a low CVSS score of 3.3, indicating a low severity attack that requires local access and user interaction (e.g., running a malicious application) to achieve a limited impact on confidentiality. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it is not a high-priority threat.