Known vulnerabilities in Microsoft Office 2016 - page 5

Vendor: Microsoft
Software: Microsoft Office
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 274
Public exploits: 18
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2016 Microsoft Office 2016 is affected by 274 vulnerabilities: 14 critical, 197 high, 26 medium, 37 low Critical High Medium Low

Vulnerabilities (274)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73511 - Exposure of sensitive information to an unauthorized actor
CVE-2023-23397		 CWE-200 Critical
Public exploit available
Exploited
 - 14.03.2023 SB2023031428
#VU72192 - Memory corruption
CVE-2023-21716		 CWE-119 High
Public exploit available
Exploited
 - 14.02.2023 SB2023021433
#VU68151 - Use After Free
CVE-2022-38048		 CWE-416 High
No
No
 - 11.10.2022 SB2022101155
#VU67265 - Use After Free
CVE-2022-37962		 CWE-416 High
No
No
 - 13.09.2022 SB2022091366
#VU66308 - Improper input validation
CVE-2022-34717		 CWE-20 High
No
No
 - 09.08.2022 SB2022080939
#VU65217 - Security Features
CVE-2022-33632		 CWE-254 Medium
No
No
 - 12.07.2022 SB2022071262
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224
#VU60408 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23252		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020836
#VU60393 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22003		 CWE-94 High
No
No
 - 08.02.2022 SB2022020831
#VU59477 - Memory corruption
CVE-2022-21841		 CWE-119 High
No
No
 - 11.01.2022 SB2022011160
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU58949 - Exposure of sensitive information to an unauthorized actor
CVE-2021-42295		 CWE-200 Low
No
No
 - 14.12.2021 SB2021121470
#VU58948 - Permissions, Privileges, and Access Controls
CVE-2021-42293		 CWE-264 Medium
No
No
 - 14.12.2021 SB2021121469
#VU58926 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43255		 CWE-451 Low
No
No
 - 14.12.2021 SB2021121454
#VU58064 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41368		 CWE-94 High
No
No
 - 09.11.2021 SB2021110936
#VU58058 - Improper input validation
CVE-2021-42292		 CWE-20 Critical
No
Exploited
 - 09.11.2021 SB2021110931
#VU57300 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40454		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101241
SB2022111615
#VU57267 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40472		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101217
#VU57266 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40471		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217
#VU57265 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40473		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217


Showing elements 81 - 100 out of 274