Office 2016

CVEs (55)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-11934	Microsoft Office	Med	0.37	5.5	0.13	Dec 12, 2017	Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVE-2026-70317	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-68797	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-64899	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63529	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63524	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63517	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44821	Microsoft Office	Med	0.36	5.5	0.00	Jun 9, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45485	Microsoft Office	Low	0.21	3.3	0.00	Jun 9, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56195	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140	Microsoft Office	Hig	0.00	7.8	0.00	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55139	Microsoft Office	Med	0.00	5.5	0.00	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129	Microsoft Office	Hig	0.00	7.8	0.00	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55125	Microsoft Office	Hig	0.00	7.8	0.01	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55057	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55056	Microsoft Office	Hig	0.00	7.8	0.00	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55049	Microsoft Office	Hig	0.00	7.8	0.00	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55045	Microsoft Office	Hig	0.00	8.4	0.00	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2017-11934MedDec 12, 2017
Microsoft
Office
risk 0.37cvss 5.5epss 0.13
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVE-2026-70317MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-68797MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-64899MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63529MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63524MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63517MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44821MedJun 9, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45485LowJun 9, 2026
Microsoft
Office
risk 0.21cvss 3.3epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56195MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55139MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55125HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55057MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55056HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55049HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55045HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 8.4epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Page 2 of 3