Microsoft Office 2016 vulnerabilities

5 known vulnerabilities in Microsoft Office 2016 from Microsoft. 4 are rated high or critical, and 5 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Office Security Feature Bypass Exploited

  CVE-2026-21509Jan 26, 2026MicrosoftEPSS 70.8%

  Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

• 9.8 Critical severity

  Microsoft Outlook Improper Input Validation Exploited

  CVE-2024-21413Feb 13, 2024MicrosoftEPSS 94.7%

  Microsoft Outlook Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Excel Security Feature Bypass Exploited

  CVE-2021-42292Nov 10, 2021MicrosoftEPSS 43%

  Microsoft Excel Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Office Access Connectivity Engine Remote Code Execution Exploited

  CVE-2021-38646Sep 15, 2021MicrosoftEPSS 7.99%

  Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

• 6.5 Medium severity

  Microsoft Office Remote Code Execution Exploited

  CVE-2021-27059Mar 11, 2021MicrosoftEPSS 6.08%

  Microsoft Office Remote Code Execution Vulnerability