Microsoft 365 Apps For Enterprise vulnerabilities
765 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.
Total CVEs
765
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL7HIGH584MEDIUM164LOW10
Vulnerabilities
Page 38 of 39
CVE-2022-41105P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41105 [MEDIUM] CVE-2022-41105: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2023-21714P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-02-14
CVE-2023-21714 [MEDIUM] CWE-125 CVE-2023-21714: Microsoft Office Information Disclosure Vulnerability
Microsoft Office Information Disclosure Vulnerability
nvd
CVE-2022-33632P4MEDIUMCVSS 4.7≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-07-12
CVE-2022-33632 [MEDIUM] CVE-2022-33632: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2026-50678P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50678 [LOW] CWE-122 CVE-2026-50678: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45466P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45466 [LOW] CWE-122 CVE-2026-45466: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55035P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50665P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50665 [LOW] CWE-125 CVE-2026-50665: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-56193P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-56193 [LOW] CWE-125 CVE-2026-56193: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55139P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55139 [LOW] CWE-125 CVE-2026-55139: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45485P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45459P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45459 [LOW] CWE-693 CVE-2026-45459: Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a s
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2025-49756P4LOWCVSS 3.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-07-08
CVE-2025-49756 [LOW] CWE-327 CVE-2025-49756: Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized a
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2022-35742HIGHCVSS 7.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-06-01
CVE-2022-35742 [HIGH] Microsoft Outlook Denial of Service Vulnerability
Microsoft Outlook Denial of Service Vulnerability
Microsoft Outlook Denial of Service Vulnerability
cvelistv5
CVE-2021-38650HIGHCVSS 7.6≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-09-15
CVE-2021-38650 [HIGH] Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2023-33151MEDIUMCVSS 6.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-07-11
CVE-2023-33151 [MEDIUM] Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2021-28452HIGHCVSS 7.1≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-04-13
CVE-2021-28452 [HIGH] Microsoft Outlook Memory Corruption Vulnerability
Microsoft Outlook Memory Corruption Vulnerability
Microsoft Outlook Memory Corruption Vulnerability
cvelistv5
CVE-2020-17063MEDIUMCVSS 6.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2020-11-11
CVE-2020-17063 [MEDIUM] Microsoft Office Online Spoofing Vulnerability
Microsoft Office Online Spoofing Vulnerability
Microsoft Office Online Spoofing Vulnerability
cvelistv5
CVE-2023-36893MEDIUMCVSS 6.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-08-08
CVE-2023-36893 [MEDIUM] CWE-20 Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2023-23398HIGHCVSS 7.1≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-03-14
CVE-2023-23398 [HIGH] Microsoft Excel Spoofing Vulnerability
Microsoft Excel Spoofing Vulnerability
Microsoft Excel Spoofing Vulnerability
cvelistv5
CVE-2024-43609MEDIUMCVSS 6.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-10-08
CVE-2024-43609 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5