Microsoft 365 Apps vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft 365 Apps: 575 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:365_apps
CVE-2025-62555
High · 7.0
CWE-416 Dec 9, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62554
High · 7.8
CWE-843 Dec 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62552
High · 7.8
CWE-23 Dec 9, 2025
Microsoft Access Remote Code Execution Vulnerability
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2025-62216
High · 7.8
CWE-416 Nov 11, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62205
High · 7.8
CWE-416 Nov 11, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-62203
High · 7.8
CWE-416 Nov 11, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62202
High · 7.1
CWE-125 Nov 11, 2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-62201
High · 7.8
CWE-122 Nov 11, 2025
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62200
High · 7.8
CWE-822 Nov 11, 2025
Microsoft Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62199
High · 7.8
CWE-416 Nov 11, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-60728
Medium · 4.3
CWE-125 Nov 11, 2025
Microsoft Excel Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2025-60727
High · 7.8
CWE-125 Nov 11, 2025
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-60726
High · 7.1
CWE-125 Nov 11, 2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59240
Medium · 5.5
CWE-200 Nov 11, 2025
Microsoft Excel Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59243
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59238
High · 7.8
CWE-416 Oct 14, 2025
Microsoft PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-59236
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59235
High · 7.1
CWE-125 Oct 14, 2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59234
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59233
High · 7.8
CWE-843 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59232
High · 7.1
CWE-125 Oct 14, 2025
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59231
High · 7.8
CWE-843 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59229
Medium · 5.5
CWE-248 Oct 14, 2025
Microsoft Office Denial of Service Vulnerability
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
CVE-2025-59227
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59226
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Visio Remote Code Execution Vulnerability
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.