Product by Microsoft
Microsoft Office 2016
228 known vulnerabilities in Microsoft Office 2016 (Microsoft), 5 of them actively exploited (CISA KEV).
Key figures
228
Vulnerabilities
5
Actively exploited (KEV)
1
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2021-42292 | Microsoft Excel Security Feature Bypass Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability In CISA KEV | 7.6 | |
| High | CVE-2025-47994 | Microsoft Office Elevation of Privilege Vulnerability | 7.8 | |
| Medium | CVE-2024-38200 | Microsoft Office Spoofing Vulnerability | 6.5 | |
| Medium | CVE-2023-36413 | Microsoft Office Security Feature Bypass Vulnerability | 6.5 | |
| High | CVE-2021-31179 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-31939 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2024-38021 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2023-35636 | Microsoft Outlook Information Disclosure Vulnerability | 6.5 | |
| High | CVE-2020-1494 | Microsoft Excel Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2020-1495 | Microsoft Excel Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2020-1496 | Microsoft Excel Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2021-38658 | Microsoft Office Graphics Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-16930 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2022-21840 | Microsoft Office Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2021-27057 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-27054 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34469 | Microsoft Office Security Feature Bypass Vulnerability | 8.2 | |
| High | CVE-2019-1155 | Jet Database Engine Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-17062 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-1711 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2020-1335 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 |
News
- NCSC-2026-0352 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0286 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0286 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,
- NCSC-2026-0237 [1.02] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0237 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,