MediumCVSS 5.5
EPSS 0.54%
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Product
Microsoft Word 2016 vulnerabilities
108 published CVES affecting Microsoft Word 2016, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 108
- Critical
- 3
- High
- 70
- Medium
- 35
- Low
- 0
- Unscored
- 0
- CISA KEV
- 1
Latest Microsoft Word 2016 CVEs
Newest publication first · page 1 of 5
-
-
MediumCVSS 5.5 EPSS 0.54%
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 8.8 EPSS 0.82%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.5 EPSS 0.54%
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 8.8 EPSS 0.82%
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 5.0 EPSS 0.51%
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CriticalCVSS 9.8 EPSS 0.97%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
MediumCVSS 6.5 EPSS 0.92%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
HighCVSS 8.8 EPSS 0.82%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.