Microsoft 365 Apps For Enterprise vulnerabilities
765 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.
Total CVEs
765
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL7HIGH584MEDIUM164LOW10
Vulnerabilities
Page 20 of 39
CVE-2025-62564P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62564 [HIGH] CWE-125 CVE-2025-62564: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62560P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62560 [HIGH] CWE-126 CVE-2025-62560: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62561P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62561 [HIGH] CWE-822 CVE-2025-62561: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-43576P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-10-08
CVE-2024-43576 [HIGH] CWE-426 CVE-2024-43576: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2026-55031P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55031 [HIGH] CWE-125 CVE-2026-55031: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55058P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55058 [HIGH] CWE-125 CVE-2026-55058: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55044P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55044 [HIGH] CWE-125 CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55136P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55136 [HIGH] CWE-822 CVE-2026-55136: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26112P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-03-10
CVE-2026-26112 [HIGH] CWE-822 CVE-2026-26112: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45471P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45471 [HIGH] CWE-822 CVE-2026-45471: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20956P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-01-13
CVE-2026-20956 [HIGH] CWE-822 CVE-2026-20956: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-30393P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-05-13
CVE-2025-30393 [HIGH] CWE-416 CVE-2025-30393: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-32704P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-05-13
CVE-2025-32704 [HIGH] CWE-126 CVE-2025-32704: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-81957P3HIGHCVSS 7.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-81957 [HIGH] CWE-125 CVE-2026-81957: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-81956P3HIGHCVSS 7.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-81956 [HIGH] CWE-125 CVE-2026-81956: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-63525P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-63525 [HIGH] CWE-197 CVE-2026-63525: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44823P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-44823 [HIGH] CWE-197 CVE-2026-44823: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45457P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45457 [HIGH] CWE-125 CVE-2026-45457: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-68804P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-68804 [HIGH] CWE-122 CVE-2026-68804: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-68810P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-68810 [HIGH] CWE-822 CVE-2026-68810: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd