Microsoft Office 2016 vulnerabilities
228 known vulnerabilities affecting microsoft/microsoft_office_2016.
Total CVEs
228
CISA KEV
5
actively exploited
Public exploits
4
Exploited in wild
6
Severity breakdown
CRITICAL2HIGH163MEDIUM58LOW5
Vulnerabilities
Page 1 of 12
CVE-2024-21413P1CRITICALCVSS 9.8KEVPoC≥ 16.0.0, < 16.0.5435.10012024-02-13
CVE-2024-21413 [CRITICAL] CWE-20 CVE-2024-21413: Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
nvd
CVE-2026-21509P1HIGHCVSS 7.8KEVPoC≥ 16.0.0, < 16.0.5539.10012026-01-26
CVE-2026-21509 [HIGH] CWE-807 CVE-2026-21509: Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attac
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2021-42292P1HIGHCVSS 7.8KEV≥ 16.0.0, < 16.0.5239.10012021-11-10
CVE-2021-42292 [HIGH] CVE-2021-42292: Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
nvd
CVE-2021-38646P1HIGHCVSS 7.8KEVRansomware≥ 16.0.0, < 5215.10002021-09-15
CVE-2021-38646 [HIGH] CVE-2021-38646: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
nvd
CVE-2021-27059P2MEDIUMCVSS 6.5KEV≥ 16.0.0, < 16.0.5134.10002021-03-11
CVE-2021-27059 [MEDIUM] CVE-2021-27059: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2024-38021P1HIGHCVSS 8.8Exploited≥ 16.0.0, < 16.0.5456.10002024-07-09
CVE-2024-38021 [HIGH] CWE-20 CVE-2024-38021: Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
nvd
CVE-2023-23399P3HIGHCVSS 7.8PoC≥ 16.0.0, < 16.0.5387.10002023-03-14
CVE-2023-23399 [HIGH] CWE-125 CVE-2023-23399: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2026-78510P2CRITICALCVSS 9.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-78510 [CRITICAL] CWE-122 CVE-2026-78510: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69442P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-69442 [HIGH] CWE-122 CVE-2026-69442: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78505P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-78505 [HIGH] CWE-122 CVE-2026-78505: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69778P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-69778 [HIGH] CWE-122 CVE-2026-69778: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78524P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-78524 [HIGH] CWE-787 CVE-2026-78524: Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a netwo
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69764P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-69764 [HIGH] CWE-122 CVE-2026-69764: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-81955P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81955 [HIGH] CWE-122 CVE-2026-81955: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69285P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10002026-09-08
CVE-2026-69285 [HIGH] CWE-122 CVE-2026-69285: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-28455P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5161.10012021-05-11
CVE-2021-28455 [HIGH] CVE-2021-28455: Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
nvd
CVE-2026-81952P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10032026-09-08
CVE-2026-81952 [HIGH] CWE-122 CVE-2026-81952: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78526P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10022026-09-08
CVE-2026-78526 [HIGH] CWE-122 CVE-2026-78526: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69529P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10022026-09-08
CVE-2026-69529 [HIGH] CWE-122 CVE-2026-69529: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78518P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.5569.10032026-09-08
CVE-2026-78518 [HIGH] CWE-20 CVE-2026-78518: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
1 / 12Next →