Known vulnerabilities in Microsoft Office 2016

Vendor: Microsoft
Software: Microsoft Office
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 274
Public exploits: 18
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2016 Microsoft Office 2016 is affected by 274 vulnerabilities: 14 critical, 197 high, 26 medium, 37 low Critical High Medium Low

Vulnerabilities (274)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134502 - Stack-based buffer overflow
CVE-2026-45463		 CWE-121 High
No
No
 - 15.06.2026 SB2026061527
#VU134501 - Untrusted Pointer Dereference
CVE-2026-45645		 CWE-822 High
No
No
 - 15.06.2026 SB2026061527
#VU134500 - Use After Free
CVE-2026-45461		 CWE-416 High
No
No
 - 15.06.2026 SB2026061527
#VU134498 - Heap-based Buffer Overflow
CVE-2026-44824		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134497 - Out-of-bounds read
CVE-2026-44821		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134496 - Heap-based Buffer Overflow
CVE-2026-44819		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU134495 - Out-of-bounds read
CVE-2026-45485		 CWE-125 Medium
No
No
 - 15.06.2026 SB2026061527
#VU134494 - Use After Free
CVE-2026-45474		 CWE-416 High
No
No
 - 15.06.2026 SB2026061527
#VU134493 - Use After Free
CVE-2026-45472		 CWE-416 High
No
No
 - 15.06.2026 SB2026061527
#VU134489 - Heap-based Buffer Overflow
CVE-2026-45475		 CWE-122 High
No
No
 - 15.06.2026 SB2026061527
#VU131321 - Heap-based Buffer Overflow
CVE-2026-40363		 CWE-122 High
No
No
 - 13.05.2026 SB2026051357
#VU131319 - Use After Free
CVE-2026-40358		 CWE-416 High
No
No
 - 13.05.2026 SB2026051357
#VU126241 - Use After Free
CVE-2026-32190		 CWE-416 High
No
No
 - 15.04.2026 SB20260415154
#VU122047 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-21509		 CWE-807 Critical
Public exploit available
Exploited
 - 26.01.2026 SB2026012659
#VU121457 - Use After Free
CVE-2026-20952		 CWE-416 High
No
No
 - 14.01.2026 SB20260114104
#VU121456 - Use After Free
CVE-2026-20953		 CWE-416 High
No
No
 - 14.01.2026 SB20260114104
#VU121455 - Untrusted Search Path
CVE-2026-20943		 CWE-426 High
No
No
 - 14.01.2026 SB20260114104
#VU119492 - Use After Free
CVE-2025-62557		 CWE-416 High
No
No
 - 09.12.2025 SB2025120989
#VU119491 - Type confusion
CVE-2025-62554		 CWE-843 High
No
No
 - 09.12.2025 SB2025120989
#VU118334 - Use After Free
CVE-2025-62199		 CWE-416 High
No
No
 - 11.11.2025 SB2025111201


Showing elements 1 - 20 out of 274