Skip to content

Known vulnerabilities in Microsoft Office 2016

Is your version affected?

CVE Summary Score Published
CVE-2025-49696 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jul 8, 2025
CVE-2025-49695 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jul 8, 2025
CVE-2025-47994 Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally 7.8 High Jul 8, 2025
CVE-2025-47173 Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Jun 10, 2025
CVE-2025-47167 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to… 8.4 High Jun 10, 2025
CVE-2025-47164 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jun 10, 2025
CVE-2025-47953 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jun 10, 2025
CVE-2025-47162 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jun 10, 2025
CVE-2025-30386 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High May 13, 2025
CVE-2025-30377 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High May 13, 2025
CVE-2025-29979 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High May 13, 2025
CVE-2025-29816 Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a… 7.5 High Apr 8, 2025
CVE-2025-26642 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-29820 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-29792 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally 7.3 High Apr 8, 2025
CVE-2025-29791 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to… 7.8 High Apr 8, 2025
CVE-2025-27752 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-27749 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-27748 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-27746 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-27745 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-27744 Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-24083 Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Mar 11, 2025
CVE-2025-24080 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Mar 11, 2025
CVE-2025-24057 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Mar 11, 2025

Other Microsoft products