VendorsMicrosoftword2016
Vulnerabilities

Microsoft Word 2016

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

185CVEs
CVE-2026-64915
Microsoft Office Word Remote Code Execution Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.005
CVE-2026-70311
Microsoft Office Word Remote Code Execution Vulnerability
Published 2026-08-11 · Analyzed
7.8EPSS 0.005
CVE-2025-59222
Microsoft Word Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.8EPSS 0.005
CVE-2025-49700
Microsoft Word Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.8EPSS 0.004
CVE-2018-8310
A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.
Published 2018-07-11 · Modified
7.5EPSS 0.057
CVE-2026-21511
Microsoft Outlook Spoofing Vulnerability
Published 2026-02-10 · Analyzed
7.5EPSS 0.038
CVE-2024-49033
Microsoft Word Security Feature Bypass Vulnerability
Published 2024-11-12 · Analyzed
7.5EPSS 0.021
CVE-2023-29335
Microsoft Word Security Feature Bypass Vulnerability
Published 2023-05-09 · Modified
7.5EPSS 0.012
CVE-2026-70105
Microsoft Word Information Disclosure Vulnerability
Published 2026-08-20 · Analyzed
7.5EPSS 0.010
CVE-2025-29816
Microsoft Word Security Feature Bypass Vulnerability
Published 2025-04-08 · Analyzed
7.5EPSS 0.005
CVE-2023-36762
Microsoft Word Remote Code Execution Vulnerability
Published 2023-09-12 · Modified
7.3EPSS 0.008
CVE-2019-1461
A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'.
Published 2019-12-10 · Modified
7.1EPSS 0.046
CVE-2025-54905
Microsoft Word Information Disclosure Vulnerability
Published 2025-09-09 · Analyzed
7.1EPSS 0.006
CVE-2025-24078
Microsoft Word Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.0EPSS 0.006
CVE-2025-62555
Microsoft Word Remote Code Execution Vulnerability
Published 2025-12-09 · Analyzed
7.0EPSS 0.005
CVE-2025-59221
Microsoft Word Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.0EPSS 0.004
CVE-2025-49699
Microsoft Office Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.0EPSS 0.003
CVE-2025-53736
Microsoft Word Information Disclosure Vulnerability
Published 2025-08-12 · Analyzed
6.8EPSS 0.005
CVE-2023-36761
Microsoft Word Information Disclosure Vulnerability
Published 2023-09-12 · Analyzed
6.5KEVEPSS 0.196
CVE-2018-0950
An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.
Published 2018-04-12 · Modified
6.5EPSS 0.089
CVE-2026-78522
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-78503
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-69719
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-69734
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-80090
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-78502
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-77911
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-80079
Microsoft Office Word Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2026-78520
Microsoft Office Outlook Information Disclosure Vulnerability
Published 2026-09-08 · Analyzed
6.5EPSS 0.009
CVE-2016-3279
Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted XLA file, aka "Microsoft Office Remote Code Execution Vulnerability."
Published 2016-07-13 · Modified
5.5EPSS 0.164
CVE-2021-31178
Microsoft Office Information Disclosure Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.160
CVE-2017-0029
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
Published 2017-03-17 · Modified
5.5EPSS 0.156
CVE-2019-0561
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
Published 2019-01-08 · Modified
5.5EPSS 0.079
CVE-2020-1342
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
Published 2020-07-14 · Modified
5.5EPSS 0.064
CVE-2020-1445
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
Published 2020-07-14 · Modified
5.5EPSS 0.061
CVE-2020-1503
Microsoft Word Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.046
CVE-2022-29107
Microsoft Office Security Feature Bypass Vulnerability
Published 2022-05-10 · Modified
5.5EPSS 0.029
CVE-2020-17020
Microsoft Word Security Feature Bypass Vulnerability
Published 2020-11-11 · Modified
5.5EPSS 0.013
CVE-2024-49065
Microsoft Office Remote Code Execution Vulnerability
Published 2024-12-10 · Analyzed
5.5EPSS 0.011
CVE-2022-24511
Microsoft Office Word Tampering Vulnerability
Published 2022-03-09 · Modified
5.5EPSS 0.011
← Prev4 / 5Next →