Microsoft Word 2016 vulnerabilities
119 vulnerabilities
Known vulnerabilities in Microsoft Word 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-40486microsoftmicrosoft office 2019+13
EPSS score5.99%
Microsoft Word Remote Code Execution VulnerabilityCVE-2021-1716microsoft365_apps+21EPSS score3.89%
Microsoft Word Remote Code Execution VulnerabilityCVE-2021-1715microsoft365_apps+21EPSS score3.89%
Microsoft Word Remote Code Execution VulnerabilityCVE-2021-31180microsoft365_apps+7EPSS score2.34%
Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2021-28453microsoft365_apps+20EPSS score4.05%
Microsoft Word Remote Code Execution VulnerabilityCVE-2021-34452microsoft365_apps+5EPSS score2.21%
Microsoft Word Remote Code Execution VulnerabilityCVE-2025-54905microsoft365_apps+14EPSS score0.62%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2025-59221microsoft365_apps+13EPSS score0.39%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-59222microsoft365_apps+13EPSS score0.47%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-62559microsoft365_apps+13EPSS score0.64%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-62558microsoft365_apps+13EPSS score0.64%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-62562microsoft365_apps+13EPSS score0.81%
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.CVE-2025-62555microsoft365_apps+13EPSS score0.52%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-47168microsoft365_apps+14EPSS score0.64%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-47169microsoft365_apps+14EPSS score0.65%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-53738microsoft365_apps+10EPSS score0.52%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-53736microsoft365_apps+14EPSS score0.50%
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2025-53733microsoft365_apps+14EPSS score0.55%
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-29816microsoft365_apps+11EPSS score0.47%
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-27747microsoft365_apps+14EPSS score0.82%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.