Microsoft 365 Apps For Enterprise vulnerabilities
929 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.
Total CVEs
929
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL14HIGH706MEDIUM199LOW10
Vulnerabilities
Page 29 of 47
CVE-2026-64910P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-64910 [HIGH] CWE-822 CVE-2026-64910: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20956P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-01-13
CVE-2026-20956 [HIGH] CWE-822 CVE-2026-20956: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-88210P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-88210 [HIGH] CWE-807 CVE-2026-88210: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-108433P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-15
CVE-2026-108433 [HIGH] CWE-807 CVE-2026-108433: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-44820P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-44820 [HIGH] CWE-125 CVE-2026-44820: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45645P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45645 [HIGH] CWE-822 CVE-2026-45645: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45643P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45643 [HIGH] CWE-822 CVE-2026-45643: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2021-1711P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-01-12
CVE-2021-1711 [HIGH] CVE-2021-1711: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2020-16918P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2020-10-16
CVE-2020-16918 [HIGH] CWE-787 CVE-2020-16918: <p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles
A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.
An attacker who successfully exploited the vulnerability would gain execution on a victim system.
The security update addresses the vulnerability by correcting how the Base3D rendering engine handles memory.
nvd
CVE-2020-17119P3HIGHCVSS 7.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2020-12-10
CVE-2020-17119 [HIGH] CVE-2020-17119: Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
nvd
CVE-2022-24509P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24509 [HIGH] CVE-2022-24509: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-24461P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24461 [HIGH] CVE-2022-24461: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-24510P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24510 [HIGH] CVE-2022-24510: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-21988P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-02-09
CVE-2022-21988 [HIGH] CVE-2022-21988: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2021-31941P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-06-08
CVE-2021-31941 [HIGH] CVE-2021-31941: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2021-24108P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-03-11
CVE-2021-24108 [HIGH] CVE-2021-24108: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2022-21841P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-01-11
CVE-2022-21841 [HIGH] CVE-2022-21841: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2022-26901P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-04-15
CVE-2022-26901 [HIGH] CVE-2022-26901: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2021-24069P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-02-25
CVE-2021-24069 [HIGH] CVE-2021-24069: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2021-24067P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-02-25
CVE-2021-24067 [HIGH] CWE-416 CVE-2021-24067: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd