Microsoft 365 Apps For Enterprise vulnerabilities, page 5
929 vulnerabilities
Known vulnerabilities in Microsoft 365 Apps For Enterprise, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-97009microsoft · 365_apps +5 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.32%HighCVE-2026-97008microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityBuffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%HighCVE-2026-97007microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%MediumCVE-2026-97005microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.EPSS0.38%HighCVE-2026-97004microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%HighCVE-2026-97003microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%HighCVE-2026-97001microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.42%HighCVE-2026-96997microsoft · 365_apps +9 moreMicrosoft Office OneNote Elevation of Privilege VulnerabilityUse after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.EPSS0.30%HighCVE-2026-96996microsoft · 365_apps +5 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.32%HighCVE-2026-96995microsoft · 365_apps +9 moreMicrosoft Office Word Elevation of Privilege VulnerabilityStack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.EPSS0.30%MediumCVE-2026-94506microsoft · 365_apps +5 moreMicrosoft Office Access Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.EPSS0.83%HighCVE-2026-88210microsoft · 365_apps +8 moreMicrosoft Office Word Security Feature Bypass VulnerabilityReliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.EPSS0.42%HighCVE-2026-88207microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.EPSS0.46%MediumCVE-2026-88203microsoft · 365_apps +5 moreMicrosoft Office PowerPoint Information Disclosure VulnerabilityUntrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.EPSS0.83%HighCVE-2026-88202microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.72%MediumCVE-2026-88201microsoft · 365_apps +5 moreMicrosoft Office Excel Information Disclosure VulnerabilityBuffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.63%HighCVE-2026-88197microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.EPSS0.52%HighCVE-2026-88196microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.EPSS0.72%MediumCVE-2026-88195microsoft · 365_apps +5 moreMicrosoft Office Excel Information Disclosure VulnerabilityBuffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.63%MediumCVE-2026-88192microsoft · 365_apps +9 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.83%