Microsoft Excel 2016 vulnerabilities
244 known vulnerabilities affecting microsoft/microsoft_excel_2016.
Total CVEs
244
CISA KEV
1
actively exploited
Public exploits
4
Exploited in wild
2
Severity breakdown
CRITICAL1HIGH199MEDIUM43LOW1
Vulnerabilities
Page 11 of 13
CVE-2026-32188P4HIGHCVSS 7.1≥ 16.0.0.0, < 16.0.5548.10002026-04-14
CVE-2026-32188 [HIGH] CWE-125 CVE-2026-32188: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-59235P4HIGHCVSS 7.1≥ 16.0.0.0, < 16.0.5522.10002025-10-14
CVE-2025-59235 [HIGH] CWE-125 CVE-2025-59235: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-59232P4HIGHCVSS 7.1≥ 16.0.0.0, < 16.0.5522.10002025-10-14
CVE-2025-59232 [HIGH] CWE-125 CVE-2025-59232: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81399P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81399 [MEDIUM] CWE-126 CVE-2026-81399: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information l
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2020-17130P4MEDIUMCVSS 6.5≥ 16.0.0.0, < publication2020-12-10
CVE-2020-17130 [MEDIUM] CVE-2020-17130: Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
nvd
CVE-2026-21258P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5539.10022026-02-10
CVE-2026-21258 [MEDIUM] CWE-20 CVE-2026-21258: Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose info
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-21261P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5539.10022026-02-10
CVE-2026-21261 [MEDIUM] CWE-125 CVE-2026-21261: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81394P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81394 [MEDIUM] CWE-497 CVE-2026-81394: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81387P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81387 [MEDIUM] CWE-497 CVE-2026-81387: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81958P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81958 [MEDIUM] CWE-908 CVE-2026-81958: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-85875P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-85875 [MEDIUM] CWE-125 CVE-2026-85875: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81390P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81390 [MEDIUM] CWE-125 CVE-2026-81390: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81393P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81393 [MEDIUM] CWE-125 CVE-2026-81393: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81400P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81400 [MEDIUM] CWE-125 CVE-2026-81400: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81392P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81392 [MEDIUM] CWE-20 CVE-2026-81392: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81391P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81391 [MEDIUM] CWE-908 CVE-2026-81391: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-81395P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81395 [MEDIUM] CWE-125 CVE-2026-81395: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-68797P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5565.10012026-08-11
CVE-2026-68797 [MEDIUM] CWE-125 CVE-2026-68797: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-68802P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5565.10012026-08-11
CVE-2026-68802 [MEDIUM] CWE-125 CVE-2026-68802: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-68808P4MEDIUMCVSS 5.5≥ 16.0.0.0, < 16.0.5565.10012026-08-11
CVE-2026-68808 [MEDIUM] CWE-125 CVE-2026-68808: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd