Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2025-60726 [HIGH] CWE-125 CVE-2025-60726: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2025-62202 [HIGH] CWE-125 CVE-2025-62202: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-32188 [HIGH] CWE-125 CVE-2026-32188: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2024-49059 [HIGH] CWE-59 CVE-2024-49059: Microsoft Office Elevation of Privilege Vulnerability Microsoft Office Elevation of Privilege Vulnerability

CVE-2025-59235 [HIGH] CWE-125 CVE-2025-59235: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2023-36568 [HIGH] CWE-59 CVE-2023-36568: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

CVE-2022-26934 [MEDIUM] CVE-2022-26934: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability

CVE-2025-54905 [HIGH] CWE-822 CVE-2025-54905: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose i Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2025-59232 [HIGH] CWE-125 CVE-2025-59232: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2023-36897 [MEDIUM] CWE-20 CVE-2023-36897: Visual Studio Tools for Office Runtime Spoofing Vulnerability Visual Studio Tools for Office Runtime Spoofing Vulnerability

CVE-2025-53736 [MEDIUM] CWE-126 CVE-2025-53736: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information lo Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-83951 [MEDIUM] CWE-126 CVE-2026-83951: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information lo Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-83949 [MEDIUM] CWE-126 CVE-2026-83949: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information lo Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-81399 [MEDIUM] CWE-126 CVE-2026-81399: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information l Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-55026 [MEDIUM] CWE-190 CVE-2026-55026: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70323 [MEDIUM] CWE-20 CVE-2026-70323: Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70312 [MEDIUM] CWE-20 CVE-2026-70312: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70322 [MEDIUM] CWE-20 CVE-2026-70322: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-68809 [MEDIUM] CWE-459 CVE-2026-68809: Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70325 [MEDIUM] CWE-20 CVE-2026-70325: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.