Microsoft Office 365 For Mac vulnerabilities, page 4

375 vulnerabilities

Known vulnerabilities in Microsoft Office 365 For Mac, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2026-97738microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-97017microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-97011microsoft · 365_apps +9 moreMicrosoft Office Excel Remote Code Execution VulnerabilityUse of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-97010microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-97008microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityBuffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-97007microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%5.5MediumCVE-2026-97005microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.EPSS0.38%8.8HighCVE-2026-97004microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-97003microsoft · 365_apps +10 moreMicrosoft Office Excel Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS0.72%7.8HighCVE-2026-97001microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.42%7.8HighCVE-2026-96997microsoft · 365_apps +9 moreMicrosoft Office OneNote Elevation of Privilege VulnerabilityUse after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.EPSS0.30%7.8HighCVE-2026-96995microsoft · 365_apps +9 moreMicrosoft Office Word Elevation of Privilege VulnerabilityStack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.EPSS0.30%7.8HighCVE-2026-88210microsoft · 365_apps +8 moreMicrosoft Office Word Security Feature Bypass VulnerabilityReliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.EPSS0.42%7.5HighCVE-2026-88207microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.EPSS0.46%8.8HighCVE-2026-88202microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.72%8.8HighCVE-2026-88197microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.EPSS0.52%8.8HighCVE-2026-88196microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.EPSS0.72%6.5MediumCVE-2026-88192microsoft · 365_apps +9 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.83%8.8HighCVE-2026-88186microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.72%8.1HighCVE-2026-88185microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.67%