Microsoft Office 2016 vulnerabilities, page 2
228 vulnerabilities
Known vulnerabilities in Microsoft Office 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-27059microsoftmicrosoft office 2010 service pack 2+4KEV
EPSS score6.08%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-27057microsoft365_apps+15EPSS score4.32%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-27054microsoft365_apps+15EPSS score4.32%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-38646microsoft365_apps+7KEVRansomwareEPSS score7.99%
Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityCVE-2021-38658microsoftmicrosoft office 2013 service pack 1+3EPSS score6.36%
Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2021-38650microsoft365_apps+6EPSS score1.62%
Microsoft Office Spoofing VulnerabilityCVE-2021-24108microsoft365_apps+6EPSS score2.70%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-28455microsoft365_apps+38EPSS score2.12%
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution VulnerabilityCVE-2021-28454microsoft365_apps+13EPSS score3.14%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-28449microsoft365_apps+10EPSS score2.47%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-34469microsoft365_apps+5EPSS score3.70%
Microsoft Office Security Feature Bypass VulnerabilityCVE-2025-21346microsoft365_apps+7EPSS score0.67%
Microsoft Office Security Feature Bypass VulnerabilityCVE-2025-21392microsoft365_apps+9EPSS score0.84%
Microsoft Office Remote Code Execution VulnerabilityCVE-2025-54906microsoft365_apps+12EPSS score0.70%
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-54910microsoft365_apps+9EPSS score0.61%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59234microsoft365_apps+11EPSS score0.60%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59227microsoft365_apps+11EPSS score0.52%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-62554microsoft365_apps+11EPSS score0.43%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-62557microsoft365_apps+11EPSS score0.43%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-62199microsoft365_apps+10EPSS score0.81%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.