Microsoft Office 2016 vulnerabilities
161 known vulnerabilities affecting microsoft/microsoft_office_2016.
Total CVEs
161
CISA KEV
5
actively exploited
Public exploits
4
Exploited in wild
6
Severity breakdown
CRITICAL1HIGH124MEDIUM31LOW5
Vulnerabilities
Page 8 of 9
CVE-2026-44821P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-44821 [MEDIUM] CWE-125 CVE-2026-44821: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2021-31174P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5161.10002021-05-11
CVE-2021-31174 [MEDIUM] CWE-125 CVE-2021-31174: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2024-38200MEDIUMCVSS 6.5PoC≥ 16.0.0, < 16.0.5461.10012024-08-08
CVE-2024-38200 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2023-36767P4MEDIUMCVSS 4.3≥ 16.0.0, < 16.0.5413.10002023-09-12
CVE-2023-36767 [MEDIUM] CWE-20 CVE-2023-36767: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2021-42295P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5254.10002021-12-15
CVE-2021-42295 [MEDIUM] CVE-2021-42295: Visual Basic for Applications Information Disclosure Vulnerability
Visual Basic for Applications Information Disclosure Vulnerability
nvd
CVE-2021-43255P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5254.10012021-12-15
CVE-2021-43255 [MEDIUM] CVE-2021-43255: Microsoft Office Trust Center Spoofing Vulnerability
Microsoft Office Trust Center Spoofing Vulnerability
nvd
CVE-2026-55121P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5561.10002026-07-14
CVE-2026-55121 [MEDIUM] CWE-125 CVE-2026-55121: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-36009P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5426.10002023-12-12
CVE-2023-36009 [MEDIUM] CVE-2023-36009: Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
nvd
CVE-2022-23252P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5278.10002022-02-09
CVE-2022-23252 [MEDIUM] CVE-2022-23252: Microsoft Office Information Disclosure Vulnerability
Microsoft Office Information Disclosure Vulnerability
nvd
CVE-2021-40472P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5227.10002021-10-13
CVE-2021-40472 [MEDIUM] CVE-2021-40472: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2021-40454P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.0.5227.10002021-10-13
CVE-2021-40454 [MEDIUM] CWE-312 CVE-2021-40454: Rich Text Edit Control Information Disclosure Vulnerability
Rich Text Edit Control Information Disclosure Vulnerability
nvd
CVE-2022-33632P4MEDIUMCVSS 4.7≥ 16.0.0, < 16.0.5344.10002022-07-12
CVE-2022-33632 [MEDIUM] CVE-2022-33632: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2026-55035P4LOWCVSS 3.3≥ 16.0.0, < 16.0.5561.10002026-07-14
CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45485P4LOWCVSS 3.3≥ 16.0.0, < 16.0.5556.10052026-06-09
CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-56193P4LOWCVSS 3.3≥ 16.0.0, < 16.0.5561.10002026-07-14
CVE-2026-56193 [LOW] CWE-125 CVE-2026-56193: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50665P4LOWCVSS 3.3≥ 16.0.0, < 16.0.5561.10002026-07-14
CVE-2026-50665 [LOW] CWE-125 CVE-2026-50665: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55139P4LOWCVSS 3.3≥ 16.0.0, < 16.0.5561.10002026-07-14
CVE-2026-55139 [LOW] CWE-125 CVE-2026-55139: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2021-38650HIGHCVSS 7.6≥ 16.0.0, < 5215.10002021-09-15
CVE-2021-38650 [HIGH] Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2024-43609MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5469.10012024-10-08
CVE-2024-43609 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2024-38020MEDIUMCVSS 6.5≥ 16.0.0, < 16.0.5456.10002024-07-09
CVE-2024-38020 [MEDIUM] CWE-200 Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
cvelistv5