Microsoft 365 Apps vulnerabilities
905 vulnerabilities
Known vulnerabilities in Microsoft 365 Apps, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-102850microsoft365_apps+5
EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-102849microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-97781microsoft365_apps+1EPSS score0.76%
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.CVE-2026-97780microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97779microsoft365_apps+10EPSS score0.83%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-97778microsoft365_apps+10EPSS score0.59%
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97777microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97776microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97775microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97774microsoft365_apps+1EPSS score0.18%
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.CVE-2026-97773microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97772microsoft365_apps+10EPSS score0.72%
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97771microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97770microsoft365_apps+10EPSS score0.72%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97769microsoft365_apps+10EPSS score0.76%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97768microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97767microsoft365_apps+10EPSS score0.59%
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97766microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97765microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97763microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.