VendorsMicrosoftoffice2016
Vulnerabilities

Microsoft Office 2016

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

291CVEs
CVE-2019-0801
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.
Published 2019-04-09 · Modified
7.8EPSS 0.185
CVE-2018-0903
Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability".
Published 2018-03-14 · Modified
7.8EPSS 0.160
CVE-2021-31179
Microsoft Office Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.135
CVE-2021-31939
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.133
CVE-2019-0824
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0825
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0826, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0826
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0825, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0827
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0825, CVE-2019-0826.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2021-38658
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2021-09-15 · Modified
7.8EPSS 0.063
CVE-2018-0907
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a security feature bypass vulnerability due to how macro settings are enforced, aka "Microsoft Office Excel Security Feature Bypass".
Published 2018-03-14 · Modified
7.8EPSS 0.059
CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
7.8EPSS 0.049
CVE-2020-16930
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.047
CVE-2021-27054
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.040
CVE-2021-27057
Microsoft Office Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.040
CVE-2019-1264
A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Published 2019-09-11 · Modified
7.8EPSS 0.038
CVE-2020-16929
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.037
CVE-2019-1457
A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Microsoft Office Excel Security Feature Bypass'.
Published 2019-11-12 · Modified
7.8EPSS 0.035
CVE-2020-17064
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-11-11 · Modified
7.8EPSS 0.034
CVE-2020-16954
Microsoft Office Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
7.8EPSS 0.033
CVE-2021-31175
Microsoft Office Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.032
CVE-2021-28454
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.031
CVE-2021-1714
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
7.8EPSS 0.031
CVE-2021-31177
Microsoft Office Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.031
CVE-2021-31176
Microsoft Office Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.030
CVE-2021-31941
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.029
CVE-2023-33137
Microsoft Excel Remote Code Execution Vulnerability
Published 2023-06-13 · Modified
7.81 PoCEPSS 0.027
CVE-2023-23399
Microsoft Excel Remote Code Execution Vulnerability
Published 2023-03-14 · Modified
7.81 PoCEPSS 0.025
CVE-2022-26901
Microsoft Excel Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
7.8EPSS 0.025
CVE-2021-24108
Microsoft Office Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
7.8EPSS 0.025
CVE-2021-28449
Microsoft Office Remote Code Execution Vulnerability
Published 2021-04-13 · Modified
7.8EPSS 0.025
CVE-2022-22003
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.024
CVE-2021-40479
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.023
CVE-2021-40471
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.023
CVE-2021-40473
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.023
CVE-2021-31940
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.023
CVE-2022-38048
Microsoft Office Remote Code Execution Vulnerability
Published 2022-10-11 · Modified
7.8EPSS 0.016
CVE-2024-30104
Microsoft Office Remote Code Execution Vulnerability
Published 2024-06-11 · Modified
7.8EPSS 0.015
CVE-2016-0057
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows local users to gain privileges via a Trojan horse file with a crafted signature, aka "Microsoft Office Security Feature Bypass Vulnerability."
Published 2016-03-09 · Modified
7.8EPSS 0.015
CVE-2016-7275
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
Published 2016-12-20 · Modified
7.8EPSS 0.014
CVE-2022-37962
Microsoft PowerPoint Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
7.8EPSS 0.014
← Prev5 / 8Next →