Microsoft Visio 2016

productDE

cpe:/a:microsoft:visio_2016:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical2high1medium0low

updated 2026-10-27

vulnerabilities (56)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21413US	—OT critical	94.7% (100th)	KEV	no fix	2024-02-13	—
CVE-2024-38226US	—OT critical	2.67% (86th)	KEV	no fix	2024-09-10	—
CVE-2023-21742US	—	55.8% (99th)	Exploit	no fix	2023-01-10	—
CVE-2024-21378US	—	11.0% (96th)	Exploit	no fix	2024-02-13	—
CVE-2022-44690US	—	82.1% (100th)	—	no fix	2022-12-13	—
CVE-2024-38018US	—	51.2% (99th)	—	no fix	2024-09-10	—
CVE-2024-43464US	—	36.3% (98th)	—	no fix	2024-09-10	—
CVE-2024-38227US	—	8.16% (95th)	—	no fix	2024-09-10	—
CVE-2024-43466US	high7.5	4.50% (91st)	—	no fix	2024-09-10	—
CVE-2024-38228US	—	4.18% (91st)	—	no fix	2024-09-10	—
CVE-2023-21744US	—	2.92% (87th)	—	no fix	2023-01-10	—
CVE-2023-36893US	—	2.19% (82nd)	—	no fix	2023-08-08	—
CVE-2023-29328US	—	2.15% (82nd)	—	no fix	2023-08-08	—
CVE-2022-44693US	—	2.10% (82nd)	—	no fix	2022-12-13	—
CVE-2023-36894US	—	2.07% (81st)	—	no fix	2023-08-08	—
CVE-2023-29330US	—	2.00% (81st)	—	no fix	2023-08-08	—
CVE-2023-36892US	—	1.98% (80th)	—	no fix	2023-08-08	—
CVE-2023-36891US	—	1.98% (80th)	—	no fix	2023-08-08	—
CVE-2023-36890US	—	1.87% (79th)	—	no fix	2023-08-08	—
CVE-2023-21741US	—	1.84% (79th)	—	no fix	2023-01-10	—
CVE-2024-21379US	—	1.72% (77th)	—	no fix	2024-02-13	—
CVE-2023-36897US	medium6.5	1.68% (77th)	—	no fix	2023-08-08	—
CVE-2022-44713US	—	1.61% (76th)	—	no fix	2022-12-13	—
CVE-2024-20673US	—	1.18% (67th)	—	no fix	2024-02-13	—
CVE-2023-21743US	—OT elevated	1.16% (67th)	—	no fix	2023-01-10	—
CVE-2024-43482US	—	1.10% (65th)	—	no fix	2024-09-10	—
CVE-2023-36895US	—	1.05% (64th)	—	no fix	2023-08-08	—
CVE-2023-36896US	—	0.99% (62nd)	—	no fix	2023-08-08	—
CVE-2023-35372US	—	0.99% (62nd)	—	no fix	2023-08-08	—
CVE-2023-35371US	—	0.99% (62nd)	—	no fix	2023-08-08	—
CVE-2024-21374US	—	0.97% (62nd)	—	no fix	2024-02-13	—
CVE-2022-44691US	—	0.94% (61st)	—	no fix	2022-12-13	—
CVE-2023-21734US	—	0.94% (61st)	—	no fix	2023-01-10	—
CVE-2024-43463US	high7.8	0.94% (61st)	—	no fix	2024-09-10	—
CVE-2022-47211US	—	0.87% (59th)	—	no fix	2022-12-13	—
CVE-2022-44696US	—	0.86% (58th)	—	no fix	2022-12-13	—
CVE-2022-44695US	—	0.86% (58th)	—	no fix	2022-12-13	—
CVE-2022-26804US	—	0.85% (58th)	—	no fix	2022-12-13	—
CVE-2024-21384US	—	0.85% (58th)	—	no fix	2024-02-13	—
CVE-2022-26806US	—	0.84% (58th)	—	no fix	2022-12-13	—
CVE-2022-26805US	—	0.84% (58th)	—	no fix	2022-12-13	—
CVE-2022-44692US	—	0.83% (57th)	—	no fix	2022-12-13	—
CVE-2024-43465US	—	0.80% (56th)	—	no fix	2024-09-10	—
CVE-2023-36866US	—	0.77% (55th)	—	no fix	2023-08-08	—
CVE-2023-36865US	—	0.77% (55th)	—	no fix	2023-08-08	—
CVE-2022-44694US	—	0.76% (55th)	—	no fix	2022-12-13	—
CVE-2022-47213US	—	0.74% (55th)	—	no fix	2022-12-13	—
CVE-2022-47212US	—	0.74% (55th)	—	no fix	2022-12-13	—
CVE-2023-21737US	—	0.74% (54th)	—	no fix	2023-01-10	—
CVE-2023-21736US	—	0.74% (54th)	—	no fix	2023-01-10	—

showing 50 of 56

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation31 CVEs
CWE-416Use After Free10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information5 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-284Improper Access Control4 CVEs
CWE-502Deserialization of Untrusted Data4 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)56 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan