Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2022-41063 [HIGH] CVE-2022-41063: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-29822 [HIGH] CWE-184 CVE-2025-29822: Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-26642 [HIGH] CWE-125 CVE-2025-26642: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2024-49031 [HIGH] CWE-126 CVE-2024-49031: Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2023-28295 [HIGH] CWE-190 CVE-2023-28295: Microsoft Publisher Remote Code Execution Vulnerability Microsoft Publisher Remote Code Execution Vulnerability

CVE-2023-28287 [HIGH] CWE-416 CVE-2023-28287: Microsoft Publisher Remote Code Execution Vulnerability Microsoft Publisher Remote Code Execution Vulnerability

CVE-2023-24953 [HIGH] CWE-416 CVE-2023-24953: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21346 [HIGH] CWE-693 CVE-2025-21346: Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability

CVE-2025-24083 [HIGH] CWE-822 CVE-2025-24083: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-21345 [HIGH] CWE-416 CVE-2025-21345: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2024-38016 [HIGH] CWE-284 CVE-2024-38016: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2025-54902 [HIGH] CWE-125 CVE-2025-54902: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-54898 [HIGH] CWE-125 CVE-2025-54898: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-30381 [HIGH] CWE-125 CVE-2025-30381: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-32705 [HIGH] CWE-125 CVE-2025-32705: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code local Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

CVE-2023-29335 [HIGH] CWE-20 CVE-2023-29335: Microsoft Word Security Feature Bypass Vulnerability Microsoft Word Security Feature Bypass Vulnerability

CVE-2025-29792 [HIGH] CWE-416 CVE-2025-29792: Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-80087 [MEDIUM] CWE-122 CVE-2026-80087: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose informati Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2020-16934 [HIGH] CVE-2020-16934: <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file. The security update addresses the vulnerab

CVE-2020-16949 [HIGH] CWE-401 CVE-2020-16949: <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Outlook