Microsoft 365 Apps vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft 365 Apps: 544 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:365_apps
CVE-2026-78505
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78504
High · 8.8
CWE-121 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78503
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77901
High · 8.8
CWE-476 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77898
High · 7.5
CWE-122 Sep 8, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-72977
Medium · 6.5
CWE-20 Sep 8, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72976
Medium · 5.0
CWE-125 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-72975
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72974
Medium · 6.5
CWE-126 Sep 8, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72973
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72956
Medium · 6.5
CWE-822 Sep 8, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72938
Medium · 6.5
CWE-822 Sep 8, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-69797
High · 8.8
CWE-416 Sep 8, 2026
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69778
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69767
High · 8.8
CWE-416 Sep 8, 2026
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69764
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69759
High · 8.8
CWE-121 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69742
High · 8.8
CWE-190 Sep 8, 2026
Microsoft Office Publisher Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVE-2026-69739
High · 7.5
CWE-125 Sep 8, 2026
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69734
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69722
High · 8.8
CWE-121 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69719
Medium · 6.5
CWE-126 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.