Microsoft Office 2016 vulnerabilities, page 3
228 vulnerabilities
Known vulnerabilities in Microsoft Office 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-26642microsoft365_apps+17
EPSS score0.80%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47162microsoft365_apps+11EPSS score0.76%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47173microsoft365_apps+9EPSS score0.58%
Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47994microsoft365_apps+8EPSS score3.28%
Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.CVE-2025-47164microsoft365_apps+11EPSS score0.65%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47167microsoft365_apps+11EPSS score0.67%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47953microsoft365_apps+11EPSS score0.54%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-53740microsoft365_apps+9EPSS score0.57%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-53731microsoft365_apps+9EPSS score0.57%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-29816microsoft365_apps+11EPSS score0.47%
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-29791microsoft365_apps+9EPSS score1.04%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-29979microsoft365_apps+11EPSS score0.66%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-29820microsoft365_apps+11EPSS score0.77%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-29792microsoft365_apps+7EPSS score1.14%
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.CVE-2025-27752microsoft365_apps+9EPSS score1.04%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-27749microsoft365_apps+9EPSS score1.08%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-27746microsoft365_apps+12EPSS score0.86%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-27744microsoftmicrosoft office 2016+1EPSS score1.20%
Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.CVE-2025-27748microsoft365_apps+9EPSS score1.08%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-27745microsoft365_apps+9EPSS score1.08%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.