office 2016 vulnerabilities and fixes

Recent CVEs affecting office 2016, with upgrade or downgrade steps. 53 tracked.

Also searched as: office2016.

office 2016 has 53 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-09-08. Highest priority: CVE-2026-78512 (score 50/100).

• CVE-2026-78510 HIGH 8.4 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-78512 HIGH 8.8 MITIGATE MITIGATE Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo
• CVE-2026-85875 MEDIUM 5.5 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81960 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81959 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81958 MEDIUM 5.5 MITIGATE DOWNGRADE Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose informatio
• CVE-2026-81957 HIGH 7.8 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81956 HIGH 7.8 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81954 HIGH 7.8 MITIGATE DOWNGRADE Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81953 HIGH 7.8 MITIGATE DOWNGRADE Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81952 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net
• CVE-2026-81951 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81950 HIGH 7.8 MITIGATE DOWNGRADE Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81949 HIGH 7.8 MITIGATE DOWNGRADE Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code local
• CVE-2026-81948 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81947 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81401 MEDIUM 5.5 MITIGATE DOWNGRADE Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized
• CVE-2026-81400 MEDIUM 5.5 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81399 MEDIUM 5.5 MITIGATE DOWNGRADE Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81398 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81397 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81396 HIGH 7.8 MITIGATE DOWNGRADE Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81395 MEDIUM 5.5 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81394 MEDIUM 5.5 MITIGATE DOWNGRADE Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an
• CVE-2026-81393 MEDIUM 5.5 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81392 MEDIUM 5.5 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81391 MEDIUM 5.5 MITIGATE DOWNGRADE Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose informatio
• CVE-2026-81390 MEDIUM 5.5 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81389 HIGH 7.0 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81388 HIGH 7.8 MITIGATE DOWNGRADE Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81387 MEDIUM 5.5 MITIGATE DOWNGRADE Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an
• CVE-2026-81386 HIGH 7.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-80091 MEDIUM 6.5 MITIGATE MITIGATE Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over
• CVE-2026-80089 MEDIUM 6.5 MITIGATE MITIGATE Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80088 MEDIUM 6.5 MITIGATE MITIGATE Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net
• CVE-2026-80087 MEDIUM 6.5 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a
• CVE-2026-78526 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net
• CVE-2026-78524 HIGH 8.8 MITIGATE MITIGATE Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-78518 HIGH 8.8 MITIGATE DOWNGRADE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-78515 MEDIUM 6.5 MITIGATE MITIGATE Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne
• CVE-2026-78505 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-72974 MEDIUM 6.5 MITIGATE MITIGATE Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw
• CVE-2026-69739 MEDIUM 6.5 MITIGATE MITIGATE Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69734 MEDIUM 6.5 MITIGATE MITIGATE Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose informatio
• CVE-2026-69626 MEDIUM 6.5 MITIGATE MITIGATE Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80084 MEDIUM 6.5 MITIGATE MITIGATE Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a
• CVE-2026-69778 HIGH 8.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n
• CVE-2026-69529 HIGH 8.8 MITIGATE DOWNGRADE Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n
• CVE-2026-69285 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-69442 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-64918 MEDIUM 6.5 MITIGATE MITIGATE Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing o
• CVE-2026-69764 HIGH 8.8 MITIGATE MITIGATE Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net
• CVE-2026-62804 HIGH 7.8 MITIGATE MITIGATE External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code

FAQ

How do I fix office 2016 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is office 2016 being exploited right now?

None of the tracked office 2016 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which office 2016 CVE should I patch first?

CVE-2026-78512 currently ranks highest (50/100): Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo.

RSS feed for office 2016 · ← Back to latest CVEs