Microsoft Office 365 For Mac vulnerabilities
375 known vulnerabilities affecting microsoft/microsoft_office_365_for_mac.
Total CVEs
375
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL5HIGH253MEDIUM109LOW8
Vulnerabilities
Page 13 of 19
CVE-2026-55031P3HIGHCVSS 7.8≥ 1.0.0, < 16.111.260712152026-07-14
CVE-2026-55031 [HIGH] CWE-125 CVE-2026-55031: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55058P3HIGHCVSS 7.8≥ 1.0.0, < 16.111.260712152026-07-14
CVE-2026-55058 [HIGH] CWE-125 CVE-2026-55058: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55044P3HIGHCVSS 7.8≥ 1.0.0, < 16.111.260712152026-07-14
CVE-2026-55044 [HIGH] CWE-125 CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-55136P3HIGHCVSS 7.8≥ 1.0.0, < 16.111.260712152026-07-14
CVE-2026-55136 [HIGH] CWE-822 CVE-2026-55136: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45471P3HIGHCVSS 7.8≥ 1.0.0, < 16.110.260613172026-06-09
CVE-2026-45471 [HIGH] CWE-822 CVE-2026-45471: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44823P3HIGHCVSS 7.8≥ 1.0.0, < 16.110.260613172026-06-09
CVE-2026-44823 [HIGH] CWE-197 CVE-2026-44823: Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45457P3HIGHCVSS 7.8≥ 1.0.0, < 16.110.260613172026-06-09
CVE-2026-45457 [HIGH] CWE-125 CVE-2026-45457: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-70313P3HIGHCVSS 7.8≥ 1.0.0, < 16.112.260810102026-08-11
CVE-2026-70313 [HIGH] CWE-20 CVE-2026-70313: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-64910P3HIGHCVSS 7.8≥ 1.0.0, < 16.112.260810102026-08-11
CVE-2026-64910 [HIGH] CWE-822 CVE-2026-64910: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-88210P3HIGHCVSS 7.8≥ 1.0.0, < 16.114.261011232026-10-13
CVE-2026-88210 [HIGH] CWE-807 CVE-2026-88210: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-108433P3HIGHCVSS 7.8≥ 1.0.0, < 16.114.261011232026-10-15
CVE-2026-108433 [HIGH] CWE-807 CVE-2026-108433: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2026-44820P3HIGHCVSS 7.8≥ 1.0.0, < 16.110.260613172026-06-09
CVE-2026-44820 [HIGH] CWE-125 CVE-2026-44820: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45645P3HIGHCVSS 7.8≥ 1.0.0, < 16.110.260613172026-06-09
CVE-2026-45645 [HIGH] CWE-822 CVE-2026-45645: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45643P3HIGHCVSS 7.8≥ 1.0.0, < 16.110.260613172026-06-09
CVE-2026-45643 [HIGH] CWE-822 CVE-2026-45643: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-80087P3MEDIUMCVSS 6.5≥ 1.0.0, < 16.113.260914332026-09-08
CVE-2026-80087 [MEDIUM] CWE-122 CVE-2026-80087: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose informati
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-97743P3MEDIUMCVSS 6.5≥ 1.0.0, < 16.114.261011232026-10-13
CVE-2026-97743 [MEDIUM] CWE-416 CVE-2026-97743: Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information ove
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-78520P3MEDIUMCVSS 6.5≥ 1.0.0, < 16.113.260914332026-09-08
CVE-2026-78520 [MEDIUM] CWE-125 CVE-2026-78520: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88167P3MEDIUMCVSS 6.5≥ 1.0.0, < 16.114.261011232026-10-13
CVE-2026-88167 [MEDIUM] CWE-126 CVE-2026-88167: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information ov
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-108454P3MEDIUMCVSS 6.5≥ 1.0.0, < 16.114.261011232026-10-15
CVE-2026-108454 [MEDIUM] CWE-126 CVE-2026-108454: Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose informat
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-108438P3MEDIUMCVSS 6.5≥ 1.0.0, < 16.114.261011232026-10-15
CVE-2026-108438 [MEDIUM] CWE-416 CVE-2026-108438: Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
nvd