Microsoft 365 Apps vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft 365 Apps: 575 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:365_apps
CVE-2025-59225
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59224
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59223
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59222
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59221
High · 7.0
CWE-416 Oct 14, 2025
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-54910
High · 8.4
CWE-122 Sep 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-54908
High · 7.8
CWE-416 Sep 9, 2025
Microsoft PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-54907
High · 7.8
CWE-122 Sep 9, 2025
Microsoft Office Visio Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-54904
High · 7.8
CWE-416 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54903
High · 7.8
CWE-416 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54902
High · 7.8
CWE-125 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54901
Medium · 5.5
CWE-126 Sep 9, 2025
Microsoft Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-54900
High · 7.8
CWE-122 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54899
High · 7.8
CWE-590 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54898
High · 7.8
CWE-125 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54896
High · 7.8
CWE-416 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2024-38189
High · 8.8
KEV High · 55 CWE-20 Aug 13, 2024
Microsoft Project Remote Code Execution Vulnerability
Microsoft Project Remote Code Execution Vulnerability
CVE-2024-21413
Critical · 9.8
KEV High · 69 Public exploit CWE-20 Feb 13, 2024
Microsoft Outlook Improper Input Validation Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-35636
Medium · 6.5
CWE-200 Dec 12, 2023
Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
CVE-2023-36761
Medium · 6.5
KEV High · 53 CWE-20 Sep 12, 2023
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
CVE-2023-35311
High · 8.8
KEV High · 56 CWE-367 Jul 11, 2023
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-23397
Critical · 9.8
KEV High · 66 Public exploit CWE-294 Mar 14, 2023
Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2023-21715
High · 7.3
KEV High · 55 CWE-863 Feb 14, 2023
Microsoft Office Publisher Security Feature Bypass Vulnerability
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2021-42292
High · 7.8
KEV High · 62 Public exploit Nov 9, 2021
Microsoft Excel Security Feature Bypass
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-38646
High · 7.8
KEV High · 65 Ransomware Sep 15, 2021
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability