Known vulnerabilities in Microsoft Word 2016

Vendor: Microsoft
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Total vulnerabilities: 99
Public exploits: 3
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Word version 2016 Microsoft Word 2016 is affected by 99 vulnerabilities: 3 critical, 72 high, 16 medium, 8 low Critical High Medium Low

Vulnerabilities (99)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134244 - Use After Free
CVE-2026-45458
CWE-416 High
No
No
- 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456
CWE-843 High
No
No
- 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471
CWE-822 High
No
No
- 10.06.2026 SB2026061062
#VU122587 - Deserialization of Untrusted Data
CVE-2026-21511
CWE-502 Medium
No
No
- 10.02.2026 SB2026021093
#VU121459 - Untrusted Pointer Dereference
CVE-2026-20948
CWE-822 High
No
No
- 14.01.2026 SB20260114105
#VU119495 - Use After Free
CVE-2025-62559
CWE-416 High
No
No
- 09.12.2025 SB2025120993
#VU119494 - Use After Free
CVE-2025-62558
CWE-416 High
No
No
- 09.12.2025 SB2025120993
#VU119493 - Use After Free
CVE-2025-62555
CWE-416 High
No
No
- 09.12.2025 SB2025120993
#VU119490 - Use After Free
CVE-2025-62562
CWE-416 High
No
No
- 09.12.2025 SB2025120988
#VU117290 - Use After Free
CVE-2025-59222
CWE-416 High
No
No
- 15.10.2025 SB20251015137
#VU117289 - Use After Free
CVE-2025-59221
CWE-416 High
No
No
- 15.10.2025 SB20251015137
#VU115123 - Untrusted Pointer Dereference
CVE-2025-54905
CWE-822 Medium
No
No
- 10.09.2025 SB2025091011
#VU114039 - Incorrect Conversion between Numeric Types
CVE-2025-53733
CWE-681 High
No
No
- 13.08.2025 SB2025081388
#VU114038 - Out-of-bounds read
CVE-2025-53736
CWE-125 Low
No
No
- 13.08.2025 SB2025081388
#VU114037 - Use After Free
CVE-2025-53738
CWE-416 High
No
No
- 13.08.2025 SB2025081388
#VU112692 - Use After Free
CVE-2025-49699
CWE-416 High
No
No
- 09.07.2025 SB20250709110
#VU112472 - Use After Free
CVE-2025-49700
CWE-416 High
No
No
- 08.07.2025 SB2025070837
#VU112470 - Use After Free
CVE-2025-49698
CWE-416 High
No
No
- 08.07.2025 SB2025070837
#VU112469 - Use After Free
CVE-2025-49703
CWE-416 High
No
No
- 08.07.2025 SB2025070837
#VU110998 - Heap-based Buffer Overflow
CVE-2025-47169
CWE-122 High
No
No
- 10.06.2025 SB20250610104


Showing elements 1 - 20 out of 99