Patch tracker / Products / Microsoft Office 2016 (64-bit edition)

Microsoft Office 2016 (64-bit edition): vulnerabilities and security updates

Every CVE affecting Microsoft Office 2016 (64-bit edition) and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs

15

Updates (KBs)

9

Actively exploited (KEV)

1

Critical Severity

7

CVEs affecting Microsoft Office 2016 (64-bit edition)

CVE	Severity	CVSS	EPSS	Status
CVE-2026-20963	Critical	9.8	29%	KEV
CVE-2026-20943	Critical	9.8	29%	-
CVE-2026-20951	Critical	9.8	29%	-
CVE-2026-20959	Critical	9.8	29%	-
CVE-2026-20947	Critical	9.8	29%	-
CVE-2026-20958	Critical	9.8	29%	-
CVE-2026-20948	Critical	9.8	29%	-
CVE-2024-49065	High	8.2	3.3%	-
CVE-2026-20953	High	8.4	0.6%	-
CVE-2026-20952	High	8.4	0.6%	-
CVE-2024-43600	High	7.8	1.2%	-
CVE-2025-27744	High	7.8	1.1%	-
CVE-2025-62199	High	7.8	0.7%	-
CVE-2025-59234	High	7.8	0.6%	-
CVE-2025-59227	High	7.8	0.6%	-

Updates (KBs) for Microsoft Office 2016 (64-bit edition)

Update	Released	Severity	CVSS	EPSS	CVEs	Status
KB5002822	2026-01-13	Critical	9.8	29%	6	KEV
KB5002825	2026-01-13	Critical	9.8	29%	7	KEV
KB5002828	2026-01-13	Critical	9.8	29%	7	KEV
KB5002826	2026-01-13	High	8.4	0.6%	3	-
KB2920716	2024-12-10	High	7.8	1.2%	1	-
KB5002661	2024-12-10	High	7.8	1.2%	2	-
KB5002669	2025-04-08	High	7.8	1.1%	1	-
KB5002809	2025-11-11	High	7.8	0.7%	1	-
KB5002792	2025-10-14	High	7.8	0.6%	2	-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5094123: patch details CVE-2008-4250: severity and the patch CVE-2026-48282: severity and the patch CVE-2007-3010: how to fix it CVE-2026-55255: severity and the patch KB5094122: patch details CVE-2012-0151: severity and the patch KB5093998: the full CVE list CVE-2014-1761: severity and the patch CVE-2019-0808 patch and risk

Sponsored by Senserva

This page shows the fix. Siemserva by Senserva shows which of your devices are still missing it: which ones are exposed to Microsoft Office 2016 (64-bit edition), for example, ranked by what attackers actually exploit.

Patch status in one scan: which devices are affected, which are not
Missing updates ranked by CISA KEV and EPSS, so you fix the right things first
Data from Intune, Microsoft Defender, Windows Autopatch, and Azure Update Manager, with more sources on the way
Third-party app patching too: updates published to Intune by PatchMyPC, Scappman, Robopack, or any vendor, read vendor-neutrally
Optional AI Enhanced Reporting: plain-language summaries and recommended next steps written into your reports
Then go further: 650+ security checks find the most common Microsoft 365 security misconfigurations, with compliance evidence and Senserva Trustworthy AI remediation

Senserva patching for Microsoft 365

Two minutes, click to play

Patching in action in two minutes. Watch page · All videos.

PATCHINGTenant: Contoso Manufacturing ▾OverviewAutopatch healthDevicesAsk SenservaExport Patch Status Report

3 actively exploited CVEs are unmitigated on devices in this tenant, per CISA KEV.View fix-first list ↓

Devices scanned

Intune + Autopatch + Defender

Exploited updates missing

CISA KEV, unmitigated

Microsoft updates tracked

Refreshed daily, MSRC + NVD

Security checks in scan

Patch, config, identity, logs

Triage order for this list

Same order in the dashboard, the report, and every AI answer

1st · overrides everything

Actively exploited (KEV)

e.g. KB5040219, CVE-2026-31210

2nd · tiebreaker

Severity (Critical → Low)

MSRC + EPSS probability

3rd · tiebreaker

Oldest unresolved first

Ranked missing updates, fix-first order

27 findings · showing top 2

#	Update	CVE	Severity	Source	Devices	Waiting
1	KB5040219 Windows 11 23H2 cumulative	CVE-2026-31210 KEV EPSS 0.94	Critical	Defender	41	19 days	Add to fix-first
2	KB5040088 .NET Framework security update	CVE-2026-29981 KEV	Critical	Intune	17	12 days	Add to fix-first

Estimated dashboard, sample data for illustration

Ask Senserva

via Claude + MCP

Which devices are still missing the fix for CVE-2026-31210?

41 devices are missing KB5040219, which resolves CVE-2026-31210. This CVE is on CISA KEV, so CISA BOD 22-01 calls for remediation within 14 days. You are at 19 days and counting.

source: scan_db · defender_posture · kev_join, not model memory

Get Devices Found Get Devices Missing

Senserva is a Microsoft Intelligent Security Association member. Get Going with Senserva Senserva patching Built for IT admins and security teams, with audit-ready data for compliance.

Lexicon: the terms on this page

CVE: Common Vulnerabilities and Exposures. A unique ID for one publicly known vulnerability, such as CVE-2025-1234.
KB: Microsoft Knowledge Base article. The identifier for a specific Microsoft update.
KEV: CISA Known Exploited Vulnerabilities. CVEs confirmed exploited in the wild. Fix these first.
CVSS: Common Vulnerability Scoring System. A standardized Severity score from 0 to 10.
EPSS: Exploit Prediction Scoring System. The probability a CVE will be exploited in the next 30 days.
MSRC: Microsoft Security Response Center. Microsoft's Patch Tuesday advisories and KB-to-CVE mapping.
NVD: National Vulnerability Database (NIST). Authoritative CVE metadata and CVSS scores.
Ransomware: The vulnerability is linked to known ransomware activity.

Please link to this page to stay current.

Reference: Microsoft CVE and vulnerability management, the full CVE-to-patch lookup ranked by real-world risk, and the Microsoft patching guide, how Intune, Windows Autopatch, Defender, and Azure Update Manager fit together.

Data notice: this page, the feeds, and the API are provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative vendor advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.