Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2026-66810 [MEDIUM] CWE-122 CVE-2026-66810: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2025-59235 [HIGH] CWE-125 CVE-2025-59235: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-55898 [HIGH] CWE-125 CVE-2026-55898: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-32188 [HIGH] CWE-125 CVE-2026-32188: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2024-49059 [HIGH] CWE-59 CVE-2024-49059: Microsoft Office Elevation of Privilege Vulnerability Microsoft Office Elevation of Privilege Vulnerability

CVE-2025-59232 [HIGH] CWE-125 CVE-2025-59232: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2023-36897 [MEDIUM] CWE-20 CVE-2023-36897: Visual Studio Tools for Office Runtime Spoofing Vulnerability Visual Studio Tools for Office Runtime Spoofing Vulnerability

CVE-2023-36568 [HIGH] CWE-59 CVE-2023-36568: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

CVE-2022-26934 [MEDIUM] CVE-2022-26934: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

CVE-2020-17130 [MEDIUM] CVE-2020-17130: Microsoft Excel Security Feature Bypass Vulnerability Microsoft Excel Security Feature Bypass Vulnerability

CVE-2025-54905 [HIGH] CWE-822 CVE-2025-54905: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose i Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2025-53736 [MEDIUM] CWE-126 CVE-2025-53736: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information lo Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-78506 [MEDIUM] CWE-170 CVE-2026-78506: Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose infor Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55026 [MEDIUM] CWE-190 CVE-2026-55026: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70323 [MEDIUM] CWE-20 CVE-2026-70323: Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70322 [MEDIUM] CWE-20 CVE-2026-70322: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70325 [MEDIUM] CWE-20 CVE-2026-70325: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70316 [MEDIUM] CWE-20 CVE-2026-70316: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70320 [MEDIUM] CWE-20 CVE-2026-70320: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70317 [MEDIUM] CWE-908 CVE-2026-70317: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.