Microsoft Microsoft Word 2016
71 CVEs affecting Microsoft Microsoft Word 2016. Latest disclosed: 2026-07-14. Critical: 2, High: 55.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-33150 | Critical | 9.6 | 2023-07-11 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2020-1583 | High | 8.8 | 2020-08-17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability… |
CVE-2026-45458 | High | 8.4 | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45456 | High | 8.4 | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-40367 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-40366 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-40364 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-40361 | High | 8.4 | 2026-05-12 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-53733 | High | 8.4 | 2025-08-12 | Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55134 | High | 7.8 | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55132 | High | 7.8 | 2026-07-14 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55130 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55128 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55127 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55055 | High | 7.8 | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55038 | High | 7.8 | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55033 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55032 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-45471 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |