VendorsMicrosoftoffice2016
Vulnerabilities

Microsoft Office 2016

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

291CVEs
CVE-2024-43600
Microsoft Office Elevation of Privilege Vulnerability
Published 2024-12-10 · Analyzed
7.8EPSS 0.012
CVE-2025-27744
Microsoft Office Elevation of Privilege Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.012
CVE-2024-20673
Microsoft Office Remote Code Execution Vulnerability
Published 2024-02-13 · Modified
7.8EPSS 0.012
CVE-2025-27749
Microsoft Office Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.011
CVE-2025-27748
Microsoft Office Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.011
CVE-2025-27745
Microsoft Office Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.011
CVE-2025-27752
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.010
CVE-2025-29791
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.010
CVE-2023-36895
Microsoft Outlook Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.010
CVE-2023-36896
Microsoft Excel Remote Code Execution Vulnerability
Published 2023-08-08 · Modified
7.8EPSS 0.010
CVE-2025-24057
Microsoft Office Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8EPSS 0.010
CVE-2025-27746
Microsoft Office Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.009
CVE-2024-49032
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2024-11-12 · Analyzed
7.8EPSS 0.009
CVE-2025-21392
Microsoft Office Remote Code Execution Vulnerability
Published 2025-02-11 · Analyzed
7.8EPSS 0.008
CVE-2025-26642
Microsoft Office Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.008
CVE-2024-49031
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2024-11-12 · Analyzed
7.8EPSS 0.008
CVE-2025-29820
Microsoft Word Remote Code Execution Vulnerability
Published 2025-04-08 · Analyzed
7.8EPSS 0.008
CVE-2025-54906
Microsoft Office Remote Code Execution Vulnerability
Published 2025-09-09 · Analyzed
7.8EPSS 0.007
CVE-2025-24080
Microsoft Office Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8EPSS 0.007
CVE-2025-24083
Microsoft Office Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.8EPSS 0.007
CVE-2025-21346
Microsoft Office Security Feature Bypass Vulnerability
Published 2025-01-14 · Analyzed
7.8EPSS 0.007
CVE-2023-33149
Microsoft Office Graphics Remote Code Execution Vulnerability
Published 2023-07-11 · Modified
7.8EPSS 0.006
CVE-2025-49702
Microsoft Office Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.8EPSS 0.006
CVE-2025-59234
Microsoft Office Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.006
CVE-2025-47173
Microsoft Office Remote Code Execution Vulnerability
Published 2025-06-10 · Analyzed
7.8EPSS 0.006
CVE-2023-33152
Microsoft ActiveX Remote Code Execution Vulnerability
Published 2023-07-11 · Modified
7.8EPSS 0.005
CVE-2025-59227
Microsoft Office Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.005
CVE-2021-38650
Microsoft Office Spoofing Vulnerability
Published 2021-09-15 · Modified
7.6EPSS 0.016
CVE-2018-8310
A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.
Published 2018-07-11 · Modified
7.5EPSS 0.057
CVE-2024-30101
Microsoft Office Remote Code Execution Vulnerability
Published 2024-06-11 · Modified
7.5EPSS 0.018
CVE-2025-29816
Microsoft Word Security Feature Bypass Vulnerability
Published 2025-04-08 · Analyzed
7.5EPSS 0.005
CVE-2025-29792
Microsoft Office Elevation of Privilege Vulnerability
Published 2025-04-08 · Analyzed
7.3EPSS 0.011
CVE-2026-20943
Microsoft Office Click-To-Run Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
7.0EPSS 0.007
CVE-2024-49059
Microsoft Office Elevation of Privilege Vulnerability
Published 2024-12-10 · Analyzed
7.0EPSS 0.004
CVE-2023-36413
Microsoft Office Security Feature Bypass Vulnerability
Published 2023-11-14 · Modified
6.5EPSS 0.300
CVE-2023-35636
Microsoft Outlook Information Disclosure Vulnerability
Published 2023-12-12 · Modified
6.5EPSS 0.177
CVE-2018-0950
An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.
Published 2018-04-12 · Modified
6.5EPSS 0.089
CVE-2019-0669
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-03-06 · Modified
6.5EPSS 0.064
CVE-2017-11939
Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability".
Published 2017-12-12 · Modified
6.5EPSS 0.063
CVE-2018-0819
Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."
Published 2018-01-10 · Modified
6.5EPSS 0.057
← Prev6 / 8Next →