Microsoft Microsoft Visio 2016

Name: Microsoft Microsoft Visio 2016
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high1medium0low

updated 2026-10-27

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-27055US	medium6.8	2.55% (85th)	—	publication	2021-03-11	16.0.1 → publication
CVE-2023-21741US	—	1.84% (79th)	—	16.0.5378.1000	2023-01-10	16.0.1 → 16.0.5378.1000
CVE-2024-20673US	—	1.18% (67th)	—	16.0.5435.1000	2024-02-13	16.0.1 → 16.0.5435.1000
CVE-2023-35372US	—	0.99% (62nd)	—	5439.1000	2023-08-08	16.0.1 → 5439.1000
CVE-2022-38010US	—	0.95% (61st)	—	16.0.5361.1002	2022-09-13	16.0.1 → 16.0.5361.1002
CVE-2024-43463US	high7.8	0.94% (61st)	—	16.0.5465.1001	2024-09-10	16.0.1 → 16.0.5465.1001
CVE-2022-44695US	—	0.86% (58th)	—	5374.1000	2022-12-13	16.0.1 → 5374.1000
CVE-2023-36866US	—	0.77% (55th)	—	5439.1000	2023-08-08	16.0.1 → 5439.1000
CVE-2023-21737US	—	0.74% (55th)	—	16.0.5378.1000	2023-01-10	16.0.1 → 16.0.5378.1000
CVE-2023-21736US	—	0.74% (55th)	—	16.0.5378.1000	2023-01-10	16.0.1 → 16.0.5378.1000
CVE-2024-38016US	—	0.60% (48th)	—	16.0.5465.1001	2024-09-19	16.0.1 → 16.0.5465.1001

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-416Use After Free2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-254CWE-2541 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.