Word 2016 (Microsoft) - vulnerabilities (CVEs)

94 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.

CVEs of Word 2016

• CVE-2026-83949 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-83951 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-80090 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80085 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80080 - CVSS 8.8 (high), 2026-09-08: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78525 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78520 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78522 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78521 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80079 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78503 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78514 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78506 - CVSS 5.5 (medium), 2026-09-08: Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-77911 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-77901 - CVSS 8.8 (high), 2026-09-08: Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-72976 - CVSS 5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
• CVE-2026-72973 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-72972 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78509 - CVSS 9.8 (critical), 2026-09-08: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78517 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78504 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78502 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78511 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69759 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69764 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69719 - CVSS 6.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69734 - CVSS 6.5 (medium), 2026-09-08: Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69686 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69722 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69671 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69556 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-70105 - CVSS 7.5 (high), 2026-08-20: Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-66809 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
• CVE-2026-66810 - CVSS 5.5 (medium), 2026-08-11: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-66806 - CVSS 5.5 (medium), 2026-08-11: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-64917 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-64915 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-64907 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-64905 - CVSS 7.8 (high), 2026-08-11: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-63531 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-63530 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-63528 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-63527 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-63525 - CVSS 7.8 (high), 2026-08-11: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-70318 - CVSS 5.5 (medium), 2026-08-11: Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-70310 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-70311 - CVSS 7.8 (high), 2026-08-11: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-63521 - CVSS 5.5 (medium), 2026-08-11: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-55130 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55128 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55142 - CVSS 5.5 (medium), 2026-07-14: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-55134 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55132 - CVSS 7.8 (high), 2026-07-14: Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55038 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55055 - CVSS 7.8 (high), 2026-07-14: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55127 - CVSS 7.8 (high), 2026-07-14: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55124 - CVSS 5.5 (medium), 2026-07-14: Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-55033 - CVSS 7.8 (high), 2026-07-14: Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55032 - CVSS 7.8 (high), 2026-07-14: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-55050 - CVSS 5.5 (medium), 2026-07-14: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-45471 - CVSS 7.8 (high), 2026-06-09: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-45458 - CVSS 8.4 (high), 2026-06-09: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-45456 - CVSS 8.4 (high), 2026-06-09: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-40421 - CVSS 4.3 (medium), 2026-05-12: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-40364 - CVSS 8.4 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-40367 - CVSS 8.4 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-40366 - CVSS 8.4 (high), 2026-05-12: Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-40361 - CVSS 8.4 (high), 2026-05-12: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-35440 - CVSS 5.5 (medium), 2026-05-12: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-21511 - CVSS 7.5 (high), 2026-02-10: Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-20948 - CVSS 7.8 (high), 2026-01-13: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-62562 - CVSS 7.8 (high), 2025-12-09: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
• CVE-2025-62559 - CVSS 7.8 (high), 2025-12-09: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-62558 - CVSS 7.8 (high), 2025-12-09: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-62555 - CVSS 7 (high), 2025-12-09: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-59222 - CVSS 7.8 (high), 2025-10-14: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-59221 - CVSS 7 (high), 2025-10-14: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-54905 - CVSS 7.1 (high), 2025-09-09: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53738 - CVSS 7.8 (high), 2025-08-12: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-53736 - CVSS 6.8 (medium), 2025-08-12: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733 - CVSS 8.4 (high), 2025-08-12: Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49703 - CVSS 7.8 (high), 2025-07-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49700 - CVSS 7.8 (high), 2025-07-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49699 - CVSS 7 (high), 2025-07-08: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2025-49698 - CVSS 7.8 (high), 2025-07-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-47169 - CVSS 7.8 (high), 2025-06-10: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-47168 - CVSS 7.8 (high), 2025-06-10: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-29816 - CVSS 7.5 (high), 2025-04-08: Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2025-27747 - CVSS 7.8 (high), 2025-04-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-24079 - CVSS 7.8 (high), 2025-03-11: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-24078 - CVSS 7 (high), 2025-03-11: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2024-49033 - CVSS 7.5 (high), 2024-11-12: Microsoft Word Security Feature Bypass Vulnerability
• CVE-2021-34452 - CVSS 7.8 (high), 2021-07-16: Microsoft Word Remote Code Execution Vulnerability
• CVE-2019-1034 - CVSS 7.8 (high), 2019-06-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully…