cbcvebase.

Microsoft 365 Apps For Enterprise vulnerabilities

929 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.

Total CVEs
929
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL14HIGH706MEDIUM199LOW10

Vulnerabilities

Page 3 of 47
CVE-2026-70096P2CRITICALCVSS 9.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-70096 [CRITICAL] CWE-122 CVE-2026-70096: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88178P2CRITICALCVSS 9.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-88178 [CRITICAL] CWE-416 CVE-2026-88178: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-30103P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-06-11
CVE-2024-30103 [HIGH] CWE-184 CVE-2024-30103: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability
nvd
CVE-2026-97781P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97781 [HIGH] CWE-77 CVE-2026-97781: Improper neutralization of special elements used in a command ('command injection') in Microsoft Off Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97742P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97742 [HIGH] CWE-121 CVE-2026-97742: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83891P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-83891 [HIGH] CWE-20 CVE-2026-83891: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97761P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97761 [HIGH] CWE-121 CVE-2026-97761: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97750P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97750 [HIGH] CWE-121 CVE-2026-97750: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97770P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97770 [HIGH] CWE-121 CVE-2026-97770: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97012P2HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97012 [HIGH] CWE-121 CVE-2026-97012: Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute c Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69614P2HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69614 [HIGH] CWE-20 CVE-2026-69614: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78504P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-78504 [HIGH] CWE-121 CVE-2026-78504: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69759P2HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69759 [HIGH] CWE-121 CVE-2026-69759: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69686P2HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69686 [HIGH] CWE-121 CVE-2026-69686: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69722P2HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69722 [HIGH] CWE-121 CVE-2026-69722: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108445P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-15
CVE-2026-108445 [HIGH] CWE-121 CVE-2026-108445: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108431P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-15
CVE-2026-108431 [HIGH] CWE-121 CVE-2026-108431: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108440P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-15
CVE-2026-108440 [HIGH] CWE-121 CVE-2026-108440: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-41106P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41106 [HIGH] CVE-2022-41106: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2026-100210P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-100210 [HIGH] CWE-122 CVE-2026-100210: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
Microsoft 365 Apps For Enterprise vulnerabilities | cvebase