Microsoft 365 Apps vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft 365 Apps: 533 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:365_apps
CVE-2026-88175
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88172
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167
Medium · 6.5
CWE-126 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88156
Critical · 9.8
CWE-121 Oct 13, 2026
Microsoft Office Outlook Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-88154
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88153
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88151
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88150
High · 8.8
CWE-908 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88145
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-88144
High · 8.8
CWE-416 Oct 13, 2026
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88109
High · 7.8
CWE-416 Oct 13, 2026
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-85340
High · 7.8
CWE-416 Oct 13, 2026
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-83891
High · 8.8
CWE-20 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77902
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70302
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70301
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70300
Critical · 9.8
CWE-822 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70291
Critical · 9.8
CWE-122 Oct 13, 2026
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70287
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70282
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70281
High · 7.5
CWE-125 Oct 13, 2026
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-70276
High · 7.0
CWE-416 Oct 13, 2026
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-70269
High · 8.1
CWE-122 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70268
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.