Microsoft 365 vulnerabilities, page 3
347 vulnerabilities
Known vulnerabilities in Microsoft 365, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97017microsoft365_apps+10
EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97011microsoft365_apps+9EPSS score0.72%
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97010microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97008microsoft365_apps+10EPSS score0.72%
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97007microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97005microsoft365_apps+9EPSS score0.38%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-97004microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97003microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97001microsoft365_apps+9EPSS score0.42%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-96997microsoft365_apps+9EPSS score0.30%
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.CVE-2026-96995microsoft365_apps+9EPSS score0.30%
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.CVE-2026-88210microsoft365_apps+8EPSS score0.42%
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.CVE-2026-88207microsoft365_apps+9EPSS score0.46%
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-88202microsoft365_apps+9EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-88197microsoft365_apps+9EPSS score0.52%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-88196microsoft365_apps+9EPSS score0.72%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-88192microsoft365_apps+9EPSS score0.83%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-88186microsoft365_apps+9EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-88185microsoft365_apps+9EPSS score0.67%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-88184microsoft365_apps+9EPSS score0.63%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.