Office 2016 (Microsoft) - vulnerabilities (CVEs)

173 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.

CVEs of Office 2016

• CVE-2026-62804 - CVSS 7.8 (high), 2026-09-08: External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-85875 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81948 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81950 - CVSS 7.8 (high), 2026-09-08: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81953 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81949 - CVSS 7.8 (high), 2026-09-08: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81952 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-81959 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81955 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
• CVE-2026-81951 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81957 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81388 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81395 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81394 - CVSS 5.5 (medium), 2026-09-08: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-81960 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81400 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81389 - CVSS 7 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81393 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81956 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81397 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81396 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81392 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81958 - CVSS 5.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81401 - CVSS 5.5 (medium), 2026-09-08: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81391 - CVSS 5.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81399 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81390 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81954 - CVSS 7.8 (high), 2026-09-08: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81387 - CVSS 5.5 (medium), 2026-09-08: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-81386 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81947 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81398 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-80089 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80088 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80091 - CVSS 6.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80087 - CVSS 6.5 (medium), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80084 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78526 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78524 - CVSS 8.8 (high), 2026-09-08: Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-78512 - CVSS 8.8 (high), 2026-09-08: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-72974 - CVSS 6.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69626 - CVSS 6.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69442 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-64918 - CVSS 6.5 (medium), 2026-09-08: Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-78518 - CVSS 8.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-78510 - CVSS 8.4 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-78505 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-78515 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69285 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-69778 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69764 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69529 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69739 - CVSS 7.5 (high), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69734 - CVSS 6.5 (medium), 2026-09-08: Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-68797 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-64909 - CVSS 7.8 (high), 2026-08-11: Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-64903 - CVSS 7.8 (high), 2026-08-11: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-64899 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-63532 - CVSS 7.8 (high), 2026-08-11: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-63533 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-63529 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-63526 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-63524 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-70317 - CVSS 5.5 (medium), 2026-08-11: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-65661 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-63517 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-63513 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-63515 - CVSS 7.8 (high), 2026-08-11: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55121 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-56195 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-50665 - CVSS 7.8 (high), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-56192 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55139 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55042 - CVSS 5.5 (medium), 2026-07-14: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55140 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55056 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55057 - CVSS 5.5 (medium), 2026-07-14: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55035 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55129 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55049 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55045 - CVSS 8.4 (high), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55047 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55028 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55027 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55026 - CVSS 6.2 (medium), 2026-07-14: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55125 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55022 - CVSS 7.8 (high), 2026-07-14: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55023 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-55018 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-55017 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-50467 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-50314 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-50301 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-47290 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-56193 - CVSS 7.1 (high), 2026-07-14: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-45645 - CVSS 7.8 (high), 2026-06-09: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-45485 - CVSS 3.3 (low), 2026-06-09: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-45475 - CVSS 7.8 (high), 2026-06-09: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-45472 - CVSS 8.4 (high), 2026-06-09: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-45474 - CVSS 8.4 (high), 2026-06-09: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.