Microsoft 365 Apps For Enterprise vulnerabilities
929 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.
Total CVEs
929
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL14HIGH706MEDIUM199LOW10
Vulnerabilities
Page 14 of 47
CVE-2026-64898P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-64898 [HIGH] CWE-122 CVE-2026-64898: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-63519P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-63519 [HIGH] CWE-122 CVE-2026-63519: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55129P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55129 [HIGH] CWE-122 CVE-2026-55129: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55133P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55133 [HIGH] CWE-122 CVE-2026-55133: Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute co
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-50301P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50301 [HIGH] CWE-122 CVE-2026-50301: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55120P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55120 [HIGH] CWE-122 CVE-2026-55120: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55017P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55017 [HIGH] CWE-122 CVE-2026-55017: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55056P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55056 [HIGH] CWE-122 CVE-2026-55056: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55123P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55123 [HIGH] CWE-122 CVE-2026-55123: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55140P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55140 [HIGH] CWE-122 CVE-2026-55140: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55049P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55049 [HIGH] CWE-122 CVE-2026-55049: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55043P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55043 [HIGH] CWE-122 CVE-2026-55043: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44819P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-44819 [HIGH] CWE-122 CVE-2026-44819: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45475P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45475 [HIGH] CWE-122 CVE-2026-45475: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44824P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-44824 [HIGH] CWE-122 CVE-2026-44824: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-70220P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-70220 [HIGH] CWE-122 CVE-2026-70220: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62557P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62557 [HIGH] CWE-416 CVE-2025-62557: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-70281P3HIGHCVSS 7.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-70281 [HIGH] CWE-125 CVE-2026-70281: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose informati
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-70105P3HIGHCVSS 7.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-20
CVE-2026-70105 [HIGH] CWE-20 CVE-2026-70105: Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose infor
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-69739P3HIGHCVSS 7.5≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69739 [HIGH] CWE-125 CVE-2026-69739: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
nvd