Microsoft 365 Apps For Enterprise vulnerabilities

CVE-2021-40454 [MEDIUM] CWE-312 CVE-2021-40454: Rich Text Edit Control Information Disclosure Vulnerability Rich Text Edit Control Information Disclosure Vulnerability

CVE-2025-59229 [MEDIUM] CWE-248 CVE-2025-59229: Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally. Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.

CVE-2022-33632 [MEDIUM] CVE-2022-33632: Microsoft Office Security Feature Bypass Vulnerability Microsoft Office Security Feature Bypass Vulnerability

CVE-2025-60728 [MEDIUM] CWE-125 CVE-2025-60728: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2022-41103 [MEDIUM] CVE-2022-41103: Microsoft Word Information Disclosure Vulnerability Microsoft Word Information Disclosure Vulnerability

CVE-2022-41105 [MEDIUM] CVE-2022-41105: Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability

CVE-2023-21714 [MEDIUM] CWE-125 CVE-2023-21714: Microsoft Office Information Disclosure Vulnerability Microsoft Office Information Disclosure Vulnerability

CVE-2026-45466 [LOW] CWE-122 CVE-2026-45466: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-50678 [LOW] CWE-122 CVE-2026-50678: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-50665 [LOW] CWE-125 CVE-2026-50665: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-56193 [LOW] CWE-125 CVE-2026-56193: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55139 [LOW] CWE-125 CVE-2026-55139: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-45459 [LOW] CWE-693 CVE-2026-45459: Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a s Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-49756 [LOW] CWE-327 CVE-2025-49756: Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized a Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.

CVE-2022-35742 [HIGH] Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability Microsoft Outlook Denial of Service Vulnerability

CVE-2021-38650 [HIGH] Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability Microsoft Office Spoofing Vulnerability

CVE-2023-33151 [MEDIUM] Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability Microsoft Outlook Spoofing Vulnerability

CVE-2021-28452 [HIGH] Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability Microsoft Outlook Memory Corruption Vulnerability