Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2021-38655 [HIGH] CWE-416 CVE-2021-38655: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2026-68795 [HIGH] CWE-121 CVE-2026-68795: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-40419 [HIGH] CWE-416 CVE-2026-40419: Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-64908 [HIGH] CWE-122 CVE-2026-64908: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVE-2026-64919 [HIGH] CWE-121 CVE-2026-64919: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVE-2026-64920 [HIGH] CWE-122 CVE-2026-64920: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVE-2026-64912 [HIGH] CWE-121 CVE-2026-64912: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVE-2026-64906 [HIGH] CWE-122 CVE-2026-64906: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVE-2026-63527 [HIGH] CWE-121 CVE-2026-63527: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-68792 [HIGH] CWE-77 CVE-2026-68792: Improper neutralization of special elements used in a command ('command injection') in Microsoft Off Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2025-49696 [HIGH] CWE-122 CVE-2025-49696: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2024-49033 [HIGH] CWE-20 CVE-2024-49033: Microsoft Word Security Feature Bypass Vulnerability Microsoft Word Security Feature Bypass Vulnerability

CVE-2025-27745 [HIGH] CWE-416 CVE-2025-27745: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27748 [HIGH] CWE-416 CVE-2025-27748: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27749 [HIGH] CWE-416 CVE-2025-27749: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-24057 [HIGH] CWE-122 CVE-2025-24057: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27746 [HIGH] CWE-416 CVE-2025-27746: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47169 [HIGH] CWE-122 CVE-2025-47169: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-30386 [HIGH] CWE-416 CVE-2025-30386: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-54908 [HIGH] CWE-416 CVE-2025-54908: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locall Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.