Microsoft Office 2016 vulnerabilities, page 3

108 vulnerabilities

Known vulnerabilities in Microsoft Office 2016, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2026-69442microsoft365_apps+9
EPSS score
0.82%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
7.5CVE-2026-69739microsoft365_apps+12
EPSS score
0.92%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
8.8CVE-2026-69778microsoft365_apps+12
EPSS score
0.82%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
6.5CVE-2026-69734microsoft365_apps+15
EPSS score
0.92%
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
8.8CVE-2026-69529microsoft365_apps+12
EPSS score
0.82%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
6.5CVE-2026-80091microsoft365_apps+13
EPSS score
0.92%
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-80084microsoft365_apps+9
EPSS score
0.92%
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-80087microsoft365_apps+13
EPSS score
0.92%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-80089microsoft365_apps+13
EPSS score
0.92%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-80088microsoft365_apps+13
EPSS score
0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
7.8CVE-2026-44819microsoft365_apps+17
EPSS score
0.57%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
5.5CVE-2026-44821microsoft365_apps+17
EPSS score
0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
7.8CVE-2026-44824microsoft365_apps+17
EPSS score
0.57%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4CVE-2026-45474microsoft365_apps+14
EPSS score
0.36%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4CVE-2026-45456microsoft365_apps+17
EPSS score
0.45%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4CVE-2026-45463microsoft365_apps+14
EPSS score
0.36%
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4CVE-2026-45472microsoft365_apps+14
EPSS score
0.36%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
7.8CVE-2026-45475microsoft365_apps+17
EPSS score
0.57%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
7.8CVE-2026-45645microsoft365_apps+13
EPSS score
0.47%
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
3.3CVE-2026-45485microsoft365_apps+17
EPSS score
0.56%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.