Microsoft Microsoft Word 2016
88 CVEs affecting Microsoft Microsoft Word 2016. Latest disclosed: 2026-08-20. Critical: 2, High: 61.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-33150 | Critical | 9.6 | 2023-07-11 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2020-1583 | High | 8.8 | 2020-08-17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability… |
CVE-2026-45458 | High | 8.4 | 2026-06-09 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45456 | High | 8.4 | 2026-06-09 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-40367 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-40366 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-40364 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-40361 | High | 8.4 | 2026-05-12 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2025-53733 | High | 8.4 | 2025-08-12 | Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-70311 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64915 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64907 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64905 | High | 7.8 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63527 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63525 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55134 | High | 7.8 | 2026-07-14 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55132 | High | 7.8 | 2026-07-14 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55130 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55128 | High | 7.8 | 2026-07-14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |