CVE-2016-3364 (visio)

Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.”