Microsoft Office 2016 vulnerabilities

CVE-2025-24083 [HIGH] CWE-822 CVE-2025-24083: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-29792 [HIGH] CWE-416 CVE-2025-29792: Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-80087 [MEDIUM] CWE-122 CVE-2026-80087: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose informati Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2023-33149 [HIGH] CWE-416 CVE-2023-33149: Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2023-33152 [HIGH] CWE-122 CVE-2023-33152: Microsoft ActiveX Remote Code Execution Vulnerability Microsoft ActiveX Remote Code Execution Vulnerability

CVE-2026-81389 [HIGH] CWE-122 CVE-2026-81389: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-80089 [MEDIUM] CWE-125 CVE-2026-80089: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2026-72974 [MEDIUM] CWE-126 CVE-2026-72974: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information o Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-69626 [MEDIUM] CWE-126 CVE-2026-69626: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2026-80084 [MEDIUM] CWE-125 CVE-2026-80084: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose informati Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

CVE-2026-78515 [MEDIUM] CWE-125 CVE-2026-78515: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-69734 [MEDIUM] CWE-125 CVE-2026-69734: Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-80088 [MEDIUM] CWE-125 CVE-2026-80088: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-64918 [MEDIUM] CWE-522 CVE-2026-64918: Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-80091 [MEDIUM] CWE-908 CVE-2026-80091: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2021-42293 [MEDIUM] CVE-2021-42293: Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerabilit Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

CVE-2026-20943 [HIGH] CWE-426 CVE-2026-20943: Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally. Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2021-31178 [MEDIUM] CWE-191 CVE-2021-31178: Microsoft Office Information Disclosure Vulnerability Microsoft Office Information Disclosure Vulnerability

CVE-2026-21530 [MEDIUM] CWE-415 CVE-2026-21530: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVE-2024-49059 [HIGH] CWE-59 CVE-2024-49059: Microsoft Office Elevation of Privilege Vulnerability Microsoft Office Elevation of Privilege Vulnerability