Microsoft Microsoft Office 2016 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft Office 2016: 127 record(s), with affected versions and fixes.
CVE-2026-45463
High · 8.4
CWE-121 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45461
High · 8.4
CWE-787 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456
High · 8.4
CWE-843 Jun 9, 2026
Microsoft Outlook and Word Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44824
High · 7.8
CWE-122 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44821
Medium · 5.5
CWE-125 Jun 9, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44819
High · 7.8
CWE-122 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40363
High · 8.4
CWE-122 May 12, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40358
High · 8.4
CWE-416 May 12, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-21530
Medium · 6.7
CWE-415 May 12, 2026
Windows Rich Text Edit Elevation of Privilege Vulnerability
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
CVE-2026-32190
High · 8.4
CWE-416 Apr 14, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26113
High · 7.8
CWE-822 Mar 10, 2026
Microsoft Office Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26110
High · 7.8
CWE-843 Mar 10, 2026
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-21509
High · 7.8
KEV High · 62 Public exploit CWE-807 Jan 26, 2026
Microsoft Office Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-20953
High · 8.4
CWE-416 Jan 13, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20952
High · 8.4
CWE-416 Jan 13, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20943
High · 7.0
CWE-426 Jan 13, 2026
Microsoft Office Click-To-Run Remote Code Execution Vulnerability
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62557
High · 7.8
CWE-416 Dec 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62554
High · 7.8
CWE-843 Dec 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62199
High · 7.8
CWE-416 Nov 11, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59234
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59227
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-54910
High · 8.4
CWE-122 Sep 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2024-21413
Critical · 9.8
KEV High · 69 Public exploit CWE-20 Feb 13, 2024
Microsoft Outlook Improper Input Validation Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-35636
Medium · 6.5
CWE-200 Dec 12, 2023
Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
CVE-2021-42292
High · 7.8
KEV High · 62 Public exploit Nov 9, 2021
Microsoft Excel Security Feature Bypass
Microsoft Excel Security Feature Bypass Vulnerability