Microsoft 365 Apps For Enterprise vulnerabilities
931 vulnerabilities
Known vulnerabilities in Microsoft 365 Apps For Enterprise, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-108455microsoftmicrosoft 365 apps for enterprise+5
EPSS score0.51%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108454microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108453microsoftmicrosoft 365 apps for enterprise+5EPSS score0.53%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108451microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108450microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108449microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108448microsoftmicrosoft 365 apps for enterprise+5EPSS score0.35%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-108447microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108446microsoftmicrosoft 365 apps for enterprise+6EPSS score0.44%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-108445microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108444microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-108443microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108442microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108441microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108440microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108439microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108438microsoftmicrosoft 365 apps for enterprise+3EPSS score0.51%
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108437microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108436microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108435microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.