Known vulnerabilities in Microsoft Word 2016 - page 2

Vendor: Microsoft
Software: Microsoft Word
Version: 2016
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 99
Public exploits: 3
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Word version 2016 Microsoft Word 2016 is affected by 99 vulnerabilities: 3 critical, 72 high, 16 medium, 8 low Critical High Medium Low

Vulnerabilities (99)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110999 - Use After Free
CVE-2025-47168		 CWE-416 High
No
No
 - 10.06.2025 SB20250610104
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU107264 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-29816		 CWE-349 High
No
No
 - 09.04.2025 SB2025040924
#VU105563 - Use After Free
CVE-2025-24079		 CWE-416 High
No
No
 - 11.03.2025 SB2025031196
#VU105562 - Use After Free
CVE-2025-24078		 CWE-416 High
No
No
 - 11.03.2025 SB2025031196
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU100411 - Improper input validation
CVE-2024-49033		 CWE-20 Medium
No
No
 - 12.11.2024 SB20241112166
#VU86485 - Improper input validation
CVE-2024-20673		 CWE-20 High
No
No
 - 13.02.2024 SB2024021382
#VU86482 - Out-of-bounds write
CVE-2024-21379		 CWE-787 High
No
No
 - 13.02.2024 SB2024021380
#VU78099 - Improper input validation
CVE-2023-36884		 CWE-20 Critical
Public exploit available
Exploited
 - 11.07.2023 SB2023071170
#VU78073 - Security Features
CVE-2023-33150		 CWE-254 High
No
No
 - 11.07.2023 SB2023071162
#VU75939 - Security Features
CVE-2023-29335		 CWE-254 Medium
No
No
 - 09.05.2023 SB20230509125
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU62991 - Security Features
CVE-2022-29107		 CWE-254 Medium
No
No
 - 11.05.2022 SB2022051104
#VU61180 - Improper input validation
CVE-2022-24511		 CWE-20 Medium
No
No
 - 08.03.2022 SB2022030852
#VU59443 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21842		 CWE-94 High
No
No
 - 11.01.2022 SB2022011132
#VU57261 - Use After Free
CVE-2021-40486		 CWE-416 High
No
No
 - 12.10.2021 SB2021101216
#VU54803 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34452		 CWE-94 High
No
No
 - 13.07.2021 SB2021071358


Showing elements 21 - 40 out of 99