VulnSea

office_2016 vulnerabilities

CVEs whose affected-version data names the office_2016 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

108 CVEsRSS

CVE-2026-56195Medium· 5.5
2mo ago

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

▾ SunlitMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.54%via CVEORG
CVE-2026-56192Medium· 5.5
2mo ago

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

▾ SunlitMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.60%via CVEORG
CVE-2026-50665High· 7.8
2mo ago

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.51%via CVEORG
CVE-2026-55121Medium· 5.5
2mo ago

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

▾ SunlitMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.51%via CVEORG
CVE-2026-45485Low· 3.3
3mo ago

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

▾ SunlitMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.56%via CVEORG
CVE-2026-45475High· 7.8
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.57%via CVEORG
CVE-2026-45472High· 8.4
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.36%via CVEORG
CVE-2026-45474High· 8.4
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.36%via CVEORG
CVE-2026-44819High· 7.8
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.57%via CVEORG
CVE-2026-44824High· 7.8
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.57%via CVEORG
CVE-2026-44821Medium· 5.5
3mo ago

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

▾ SunlitMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.60%via CVEORG
CVE-2026-45461High· 8.4
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.36%via CVEORG
CVE-2026-45645High· 7.8
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.47%via CVEORG
CVE-2026-45463High· 8.4
3mo ago

Microsoft Office Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.36%via CVEORG
CVE-2026-32190High· 8.4
5mo ago

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.36%via CVEORG
CVE-2021-42292High· 7.8CISA KEVPoC
4y ago

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

▾ Abyssalmicrosoft · 365_appsEPSS 43%via NVD
CVE-2021-38646High· 7.8CISA KEV
5y ago

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

▾ Abyssalmicrosoft · 365_appsEPSS 8.0%via NVD
CVE-2021-27059High· 7.6CISA KEV
5y ago

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

▾ Abyssalmicrosoft · officeEPSS 6.1%via NVD
office_2016 vulnerabilities (CVEs) — page 4 · VulnSea