Microsoft Office 2016 vulnerabilities, page 2
108 vulnerabilities
Known vulnerabilities in Microsoft Office 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-55139microsoft365_apps+13
EPSS score0.48%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55049microsoft365_apps+12EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55018microsoft365_apps+13EPSS score0.47%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55035microsoft365_apps+17EPSS score0.57%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55125microsoft365_apps+17EPSS score0.57%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55121microsoft365_apps+17EPSS score0.51%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55022microsoft365_apps+13EPSS score0.47%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55129microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55017microsoft365_apps+9EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55140microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-65661microsoft365_apps+9EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-62804microsoft365_apps+12EPSS score0.61%
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-68797microsoft365_apps+15EPSS score0.54%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-47290microsoft365_apps+9EPSS score0.47%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-56195microsoft365_apps+13EPSS score0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-56193microsoft365_apps+13EPSS score0.50%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-56192microsoft365_apps+17EPSS score0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-69626microsoft365_apps+13EPSS score0.92%
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.CVE-2026-69764microsoft365_apps+11EPSS score0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-69285microsoft365_apps+9EPSS score0.82%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.