What’s Vulnerable › Vulnerabilities

CVE-2019-16338

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-19 · updated 2026-06-17
• Weakness: CWE-416

Description

The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.

Affected products

• Hancom Office Neo: 9.6.1.7634

References

• http://help.hancom.com/update_en_multilang/details/HOfficeNEO_update.htm
• https://starlabs.sg/advisories/
• http://help.hancom.com/update_en_multilang/details/HOfficeNEO_update.htm
• https://starlabs.sg/advisories/

Get alerted when CVE-2019-16338 or the next vulnerability affects your stack