Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2026-70316 [MEDIUM] CWE-20 CVE-2026-70316: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70317 [MEDIUM] CWE-908 CVE-2026-70317: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70320 [MEDIUM] CWE-20 CVE-2026-70320: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2020-17130 [MEDIUM] CVE-2020-17130: Microsoft Excel Security Feature Bypass Vulnerability Microsoft Excel Security Feature Bypass Vulnerability

CVE-2022-29107 [MEDIUM] CVE-2022-29107: Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability

CVE-2026-21258 [MEDIUM] CWE-20 CVE-2026-21258: Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose info Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-21261 [MEDIUM] CWE-125 CVE-2026-21261: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-56192 [MEDIUM] CWE-125 CVE-2026-56192: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55028 [MEDIUM] CWE-125 CVE-2026-55028: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55124 [MEDIUM] CWE-20 CVE-2026-55124: Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attac Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55050 [MEDIUM] CWE-125 CVE-2026-55050: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55027 [MEDIUM] CWE-125 CVE-2026-55027: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55047 [MEDIUM] CWE-125 CVE-2026-55047: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55023 [MEDIUM] CWE-125 CVE-2026-55023: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70214 [MEDIUM] CWE-125 CVE-2026-70214: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-81394 [MEDIUM] CWE-497 CVE-2026-81394: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-81387 [MEDIUM] CWE-497 CVE-2026-81387: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-78506 [MEDIUM] CWE-170 CVE-2026-78506: Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose infor Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-81958 [MEDIUM] CWE-908 CVE-2026-81958: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-85875 [MEDIUM] CWE-125 CVE-2026-85875: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.