Microsoft Office 2016 vulnerabilities
108 vulnerabilities
Known vulnerabilities in Microsoft Office 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-42292microsoft365_apps+14KEV
EPSS score43.00%
Microsoft Excel Security Feature Bypass VulnerabilityCVE-2021-27059microsoftmicrosoft office 2010 service pack 2+4KEVEPSS score6.08%
Microsoft Office Remote Code Execution VulnerabilityCVE-2021-38646microsoft365_apps+7KEVRansomwareEPSS score7.99%
Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityCVE-2024-21413microsoft365_apps+7KEVEPSS score94.66%
Microsoft Outlook Remote Code Execution VulnerabilityCVE-2026-63513microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-63526microsoft365_apps+13EPSS score0.47%
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-63533microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-63515microsoft365_apps+13EPSS score0.47%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-63532microsoft365_apps+13EPSS score0.47%
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-63529microsoft365_apps+9EPSS score0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-63517microsoft365_apps+13EPSS score0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-63524microsoft365_apps+13EPSS score0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55045microsoft365_apps+17EPSS score0.45%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55027microsoft365_apps+17EPSS score0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55023microsoft365_apps+17EPSS score0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55057microsoft365_apps+13EPSS score0.54%
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55056microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55026microsoft365_apps+17EPSS score0.45%
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55042microsoft365_apps+13EPSS score0.54%
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55028microsoft365_apps+17EPSS score0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.