Office 2016

CVEs (98)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-81393	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81387	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-68797	Microsoft Office	Med	0.36	5.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-64899	Microsoft Office	Med	0.36	5.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63529	Microsoft Office	Med	0.36	5.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63524	Microsoft Office	Med	0.36	5.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63517	Microsoft Office	Med	0.36	5.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44821	Microsoft Office	Med	0.36	5.5	0.01	Jun 9, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45485	Microsoft Office	Low	0.21	3.3	0.01	Jun 9, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2015-6093	Microsoft Office		0.02	—	0.21	Nov 11, 2015	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a…
CVE-2026-56195	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140	Microsoft Office	Hig	0.00	7.8	0.00	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55139	Microsoft Office	Med	0.00	5.5	0.00	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129	Microsoft Office	Hig	0.00	7.8	0.00	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55057	Microsoft Office	Med	0.00	5.5	0.01	Jul 14, 2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-81393MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81387MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-68797MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-64899MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63529MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63524MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63517MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-44821MedJun 9, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45485LowJun 9, 2026
Microsoft
Office
risk 0.21cvss 3.3epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2015-6093Nov 11, 2015
Microsoft
Office
risk 0.02cvss —epss 0.21
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a…
CVE-2026-56195MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55139MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129HigJul 14, 2026
Microsoft
Office
risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55057MedJul 14, 2026
Microsoft
Office
risk 0.00cvss 5.5epss 0.01
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Page 4 of 5