Microsoft 365 Apps For Enterprise vulnerabilities
929 known vulnerabilities affecting microsoft/microsoft_365_apps_for_enterprise.
Total CVEs
929
CISA KEV
10
actively exploited
Public exploits
17
Exploited in wild
15
Severity breakdown
CRITICAL14HIGH706MEDIUM199LOW10
Vulnerabilities
Page 8 of 47
CVE-2026-97752P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97752 [HIGH] CWE-416 CVE-2026-97752: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97771P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97771 [HIGH] CWE-416 CVE-2026-97771: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108427P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-15
CVE-2026-108427 [HIGH] CWE-20 CVE-2026-108427: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108444P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-15
CVE-2026-108444 [HIGH] CWE-122 CVE-2026-108444: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97758P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97758 [HIGH] CWE-122 CVE-2026-97758: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97751P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97751 [HIGH] CWE-122 CVE-2026-97751: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88197P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-88197 [HIGH] CWE-122 CVE-2026-88197: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-81385P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-81385 [HIGH] CWE-502 CVE-2026-81385: Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to e
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88144P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-88144 [HIGH] CWE-416 CVE-2026-88144: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70215P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-70215 [HIGH] CWE-416 CVE-2026-70215: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97008P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97008 [HIGH] CWE-124 CVE-2026-97008: Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97011P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-97011 [HIGH] CWE-763 CVE-2026-97011: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute c
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-105595P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-10-13
CVE-2026-105595 [HIGH] CWE-125 CVE-2026-105595: Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78525P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-78525 [HIGH] CWE-416 CVE-2026-78525: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a ne
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78519P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-78519 [HIGH] CWE-908 CVE-2026-78519: Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-80081P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-80081 [HIGH] CWE-416 CVE-2026-80081: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69767P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69767 [HIGH] CWE-416 CVE-2026-69767: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69797P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69797 [HIGH] CWE-416 CVE-2026-69797: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69678P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69678 [HIGH] CWE-416 CVE-2026-69678: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69632P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.20326.201382026-09-08
CVE-2026-69632 [HIGH] CWE-416 CVE-2026-69632: Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd