Microsoft Office LTSC For Mac 2024 vulnerabilities

539 vulnerabilities

Known vulnerabilities in Microsoft Office LTSC For Mac 2024, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2026-108455microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.51%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-108454microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.51%
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-108453microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.53%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
8.8CVE-2026-108449microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
7.5CVE-2026-108448microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.35%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108446microsoftmicrosoft 365 apps for enterprise+6
EPSS score
0.44%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108445microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108444microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108443microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108442microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108441microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108440microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108439microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
6.5CVE-2026-108438microsoftmicrosoft 365 apps for enterprise+3
EPSS score
0.51%
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-108436microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-108435microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.51%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
6.5CVE-2026-108434microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
7.8CVE-2026-108433microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.32%
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
8.8CVE-2026-108432microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
8.8CVE-2026-108431microsoftmicrosoft 365 apps for enterprise+5
EPSS score
0.45%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.