WO
Product
Word
On CISA KEVExploited in the wildRansomware-linked
321
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 158Medium 52Low 2
Watch
Add Word to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-7291 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2007; 2010 |
| CVE-2016-7290 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2007; 2010 |
| CVE-2016-7268 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and… Affected: 2007 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-49699 | 7.0 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-24078 | 7.0 | Mar 11 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2020-16933 | 7.0 | Oct 16 | <p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files Affected: 2010; 2013; 2013; 2016 |