Microsoft Microsoft Office 2016
161 CVEs affecting Microsoft Microsoft Office 2016. Latest disclosed: 2026-07-14. Critical: 1, High: 125.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21413 | Critical | 9.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-38021 | High | 8.8 | 2024-07-09 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2022-34717 | High | 8.8 | 2022-08-09 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2022-21840 | High | 8.8 | 2022-01-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-28455 | High | 8.8 | 2021-05-11 | Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability |
CVE-2020-1496 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
CVE-2020-1495 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
CVE-2020-1494 | High | 8.8 | 2020-08-17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
CVE-2026-55045 | High | 8.4 | 2026-07-14 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45474 | High | 8.4 | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45472 | High | 8.4 | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45463 | High | 8.4 | 2026-06-09 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45461 | High | 8.4 | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-40363 | High | 8.4 | 2026-05-12 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-40358 | High | 8.4 | 2026-05-12 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-32190 | High | 8.4 | 2026-04-14 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-26113 | High | 8.4 | 2026-03-10 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-26110 | High | 8.4 | 2026-03-10 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-20953 | High | 8.4 | 2026-01-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-20952 | High | 8.4 | 2026-01-13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |