word_2016 vulnerabilities
CVEs whose affected-version data names the word_2016 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
32 CVEsRSS
CVE-2026-45456High· 8.4Microsoft Outlook and Word Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.44%via CVEORG
CVE-2026-45458High· 8.4Microsoft Outlook and Word Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
▾ TwilightMicrosoft · Microsoft 365 Apps for EnterpriseEPSS 0.44%via CVEORG