Microsoft 365 Apps For Enterprise vulnerabilities
765 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.
Total CVEs
765
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL7HIGH584MEDIUM164LOW10
Vulnerabilities
Page 37 of 39
CVE-2023-36767P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-09-12
CVE-2023-36767 [MEDIUM] CWE-20 CVE-2023-36767: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2026-72976P4MEDIUMCVSS 5.0≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-72976 [MEDIUM] CWE-125 CVE-2026-72976: Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information lo
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45460P4MEDIUMCVSS 4.7≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45460 [MEDIUM] CWE-126 CVE-2026-45460: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-40421P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-05-12
CVE-2026-40421 [MEDIUM] CWE-73 CVE-2026-40421: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
nvd
CVE-2021-43255P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-12-15
CVE-2021-43255 [MEDIUM] CVE-2021-43255: Microsoft Office Trust Center Spoofing Vulnerability
Microsoft Office Trust Center Spoofing Vulnerability
nvd
CVE-2022-41104P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41104 [MEDIUM] CVE-2022-41104: Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
nvd
CVE-2026-45455P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45455 [MEDIUM] CWE-125 CVE-2026-45455: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-36766P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-09-12
CVE-2023-36766 [MEDIUM] CWE-125 CVE-2023-36766: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2023-36009P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-12-12
CVE-2023-36009 [MEDIUM] CVE-2023-36009: Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
nvd
CVE-2025-21383P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-02-11
CVE-2025-21383 [MEDIUM] CWE-125 CVE-2025-21383: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2021-38657P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-09-15
CVE-2021-38657 [MEDIUM] CVE-2021-38657: Microsoft Office Graphics Component Information Disclosure Vulnerability
Microsoft Office Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-23252P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-02-09
CVE-2022-23252 [MEDIUM] CVE-2022-23252: Microsoft Office Information Disclosure Vulnerability
Microsoft Office Information Disclosure Vulnerability
nvd
CVE-2021-40472P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-10-13
CVE-2021-40472 [MEDIUM] CVE-2021-40472: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2025-59229P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-10-14
CVE-2025-59229 [MEDIUM] CWE-248 CVE-2025-59229: Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
nvd
CVE-2025-60728P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-11-11
CVE-2025-60728 [MEDIUM] CWE-125 CVE-2025-60728: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2020-17126P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2020-12-10
CVE-2020-17126 [MEDIUM] CVE-2020-17126: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2022-41060P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41060 [MEDIUM] CVE-2022-41060: Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
nvd
CVE-2023-33162P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-07-11
CVE-2023-33162 [MEDIUM] CWE-125 CVE-2023-33162: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2021-40454P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-10-13
CVE-2021-40454 [MEDIUM] CWE-312 CVE-2021-40454: Rich Text Edit Control Information Disclosure Vulnerability
Rich Text Edit Control Information Disclosure Vulnerability
nvd
CVE-2022-41103P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41103 [MEDIUM] CVE-2022-41103: Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
nvd