cbcvebase.

Microsoft 365 Apps For Enterprise vulnerabilities

765 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.

Total CVEs
765
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL7HIGH584MEDIUM164LOW10

Vulnerabilities

Page 38 of 39
CVE-2022-41105P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41105 [MEDIUM] CVE-2022-41105: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2023-21714P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-02-14
CVE-2023-21714 [MEDIUM] CWE-125 CVE-2023-21714: Microsoft Office Information Disclosure Vulnerability Microsoft Office Information Disclosure Vulnerability
nvd
CVE-2022-33632P4MEDIUMCVSS 4.7≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-07-12
CVE-2022-33632 [MEDIUM] CVE-2022-33632: Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2026-50678P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50678 [LOW] CWE-122 CVE-2026-50678: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45466P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45466 [LOW] CWE-122 CVE-2026-45466: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55035P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50665P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50665 [LOW] CWE-125 CVE-2026-50665: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-56193P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-56193 [LOW] CWE-125 CVE-2026-56193: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55139P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55139 [LOW] CWE-125 CVE-2026-55139: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45485P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45459P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45459 [LOW] CWE-693 CVE-2026-45459: Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a s Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2025-49756P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-07-08
CVE-2025-49756 [LOW] CWE-327 CVE-2025-49756: Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized a Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2022-35742HIGHCVSS 7.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-06-01
CVE-2022-35742 [HIGH] Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability
cvelistv5
CVE-2021-38650HIGHCVSS 7.6≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-09-15
CVE-2021-38650 [HIGH] Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2023-33151MEDIUMCVSS 6.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-07-11
CVE-2023-33151 [MEDIUM] Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2021-28452HIGHCVSS 7.1≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-04-13
CVE-2021-28452 [HIGH] Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability
cvelistv5
CVE-2020-17063MEDIUMCVSS 6.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2020-11-11
CVE-2020-17063 [MEDIUM] Microsoft Office Online Spoofing Vulnerability Microsoft Office Online Spoofing Vulnerability Microsoft Office Online Spoofing Vulnerability
cvelistv5
CVE-2023-36893MEDIUMCVSS 6.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-08-08
CVE-2023-36893 [MEDIUM] CWE-20 Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2023-23398HIGHCVSS 7.1≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-03-14
CVE-2023-23398 [HIGH] Microsoft Excel Spoofing Vulnerability Microsoft Excel Spoofing Vulnerability Microsoft Excel Spoofing Vulnerability
cvelistv5
CVE-2024-43609MEDIUMCVSS 6.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-10-08
CVE-2024-43609 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability
cvelistv5
Microsoft 365 Apps For Enterprise vulnerabilities | cvebase