Office 2016

CVEs (95)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-44819	Microsoft Office	Hig	0.51	7.8	0.01	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2016-7275	Microsoft Office	Hig	0.51	7.8	0.01	Dec 20, 2016	Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
CVE-2026-81389	Microsoft Office	Hig	0.46	7.0	0.00	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-80091	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80088	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80087	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80084	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-78515	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72974	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-69739	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69734	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2017-11934	Microsoft Office	Med	0.37	5.5	0.13	Dec 12, 2017	Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVE-2026-85875	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81958	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81401	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81395	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81394	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-44819HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2016-7275HigDec 20, 2016
Microsoft
Office
risk 0.51cvss 7.8epss 0.01
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
CVE-2026-81389HigSep 8, 2026
Microsoft
Office
risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-80091MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80088MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80087MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80084MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-78515MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72974MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-69739MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69734MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2017-11934MedDec 12, 2017
Microsoft
Office
risk 0.37cvss 5.5epss 0.13
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVE-2026-85875MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81958MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81401MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81395MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81394MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Page 3 of 5