~/products/microsoft/microsoft_365_apps_for_enterprise

pipeline liveDigest Docs

Microsoft 365 Apps For Enterprise vulnerabilities

929 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.

Total CVEs

929

CISA KEV

10

actively exploited

Public exploits

17

Exploited in wild

15

Severity breakdown

CRITICAL14HIGH706MEDIUM199LOW10

Vulnerabilities

SortPage 45 of 47

CVE-2024-38200MEDIUMCVSS 6.5PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-08-08

CVE-2024-38200 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability

CVE-2026-62882P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-08-11

CVE-2026-62882 [MEDIUM] CWE-522 CVE-2026-62882: Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2021-42295P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-12-15

CVE-2021-42295 [MEDIUM] CVE-2021-42295: Visual Basic for Applications Information Disclosure Vulnerability Visual Basic for Applications Information Disclosure Vulnerability

CVE-2024-49065P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-12-12

CVE-2024-49065 [MEDIUM] CWE-125 CVE-2024-49065: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2026-55121P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55121 [MEDIUM] CWE-125 CVE-2026-55121: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2023-36767P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-09-12

CVE-2023-36767 [MEDIUM] CWE-20 CVE-2023-36767: Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability

CVE-2026-45460P4MEDIUMCVSS 4.7≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09

CVE-2026-45460 [MEDIUM] CWE-126 CVE-2026-45460: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-40421P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-05-12

CVE-2026-40421 [MEDIUM] CWE-73 CVE-2026-40421: Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2021-43255P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-12-15

CVE-2021-43255 [MEDIUM] CVE-2021-43255: Microsoft Office Trust Center Spoofing Vulnerability Microsoft Office Trust Center Spoofing Vulnerability

CVE-2022-41104P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09

CVE-2022-41104 [MEDIUM] CVE-2022-41104: Microsoft Excel Security Feature Bypass Vulnerability Microsoft Excel Security Feature Bypass Vulnerability

CVE-2026-45455P4MEDIUMCVSS 4.3≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09

CVE-2026-45455 [MEDIUM] CWE-125 CVE-2026-45455: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2023-36009P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-12-12

CVE-2023-36009 [MEDIUM] CVE-2023-36009: Microsoft Word Information Disclosure Vulnerability Microsoft Word Information Disclosure Vulnerability

CVE-2023-36766P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-09-12

CVE-2023-36766 [MEDIUM] CWE-125 CVE-2023-36766: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2025-21383P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-02-11

CVE-2025-21383 [MEDIUM] CWE-125 CVE-2025-21383: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2021-38657P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-09-15

CVE-2021-38657 [MEDIUM] CVE-2021-38657: Microsoft Office Graphics Component Information Disclosure Vulnerability Microsoft Office Graphics Component Information Disclosure Vulnerability

CVE-2022-23252P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-02-09

CVE-2022-23252 [MEDIUM] CVE-2022-23252: Microsoft Office Information Disclosure Vulnerability Microsoft Office Information Disclosure Vulnerability

CVE-2021-40472P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-10-13

CVE-2021-40472 [MEDIUM] CVE-2021-40472: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2020-17126P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2020-12-10

CVE-2020-17126 [MEDIUM] CVE-2020-17126: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2022-41060P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-11-09

CVE-2022-41060 [MEDIUM] CVE-2022-41060: Microsoft Word Information Disclosure Vulnerability Microsoft Word Information Disclosure Vulnerability

CVE-2023-33162P4MEDIUMCVSS 5.5≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-07-11

CVE-2023-33162 [MEDIUM] CWE-125 CVE-2023-33162: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

← Previous45 / 47Next →

Microsoft 365 Apps For Enterprise vulnerabilities | cvebase