Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2025-54901 [MEDIUM] CWE-126 CVE-2025-54901: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information l Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-62842 [MEDIUM] CWE-125 CVE-2026-62842: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-63517 [MEDIUM] CWE-125 CVE-2026-63517: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-64899 [MEDIUM] CWE-125 CVE-2026-64899: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-68802 [MEDIUM] CWE-125 CVE-2026-68802: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-68813 [MEDIUM] CWE-125 CVE-2026-68813: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-63524 [MEDIUM] CWE-125 CVE-2026-63524: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-63529 [MEDIUM] CWE-125 CVE-2026-63529: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-68808 [MEDIUM] CWE-125 CVE-2026-68808: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2022-22716 [MEDIUM] CWE-119 CVE-2022-22716: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2021-28456 [MEDIUM] CVE-2021-28456: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2021-31174 [MEDIUM] CWE-125 CVE-2021-31174: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2020-17020 [MEDIUM] CVE-2020-17020: Microsoft Word Security Feature Bypass Vulnerability Microsoft Word Security Feature Bypass Vulnerability

CVE-2025-48812 [MEDIUM] CWE-125 CVE-2025-48812: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-26144 [MEDIUM] CWE-79 CVE-2026-26144: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2024-38200 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability

CVE-2026-62882 [MEDIUM] CWE-522 CVE-2026-62882: Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2021-42295 [MEDIUM] CVE-2021-42295: Visual Basic for Applications Information Disclosure Vulnerability Visual Basic for Applications Information Disclosure Vulnerability

CVE-2024-49065 [MEDIUM] CWE-125 CVE-2024-49065: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2026-55121 [MEDIUM] CWE-125 CVE-2026-55121: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.