365 Apps (Microsoft) - vulnerabilities (CVEs)

944 CVEs, 164 in the last 30 days, 5 known versions, newest CVE from 2026-10-15. Vendor: Microsoft.

CVEs of 365 Apps

• CVE-2026-108454 - CVSS 6.5 (medium), 2026-10-15: Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108455 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108453 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108451 - CVSS 8.8 (high), 2026-10-15: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108450 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108449 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108446 - CVSS 8.8 (high), 2026-10-15: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-108448 - CVSS 7.5 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-108447 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108445 - CVSS 8.8 (high), 2026-10-15: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108443 - CVSS 8.8 (high), 2026-10-15: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108444 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-108442 - CVSS 8.8 (high), 2026-10-15: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108441 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108440 - CVSS 8.8 (high), 2026-10-15: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108439 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108437 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108438 - CVSS 6.5 (medium), 2026-10-15: Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108436 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108435 - CVSS 6.5 (medium), 2026-10-15: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108433 - CVSS 7.8 (high), 2026-10-15: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-108434 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108432 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108431 - CVSS 8.8 (high), 2026-10-15: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108430 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108429 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108428 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108427 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108426 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-97781 - CVSS 8.8 (high), 2026-10-13: Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute…
• CVE-2026-69922 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-100209 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100212 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100211 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100210 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97745 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97768 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97772 - CVSS 8.8 (high), 2026-10-13: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97775 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97010 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97738 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97757 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97741 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97777 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97760 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97763 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97004 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97743 - CVSS 6.5 (medium), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97762 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97746 - CVSS 8.8 (high), 2026-10-13: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97011 - CVSS 8.8 (high), 2026-10-13: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97742 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97007 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97748 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97773 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97756 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97008 - CVSS 8.8 (high), 2026-10-13: Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97779 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97769 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-88207 - CVSS 7.5 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-88195 - CVSS 6.5 (medium), 2026-10-13: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88185 - CVSS 8.1 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-88192 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88203 - CVSS 6.5 (medium), 2026-10-13: Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88184 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88190 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88210 - CVSS 7.8 (high), 2026-10-13: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-88183 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88186 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-88154 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-70281 - CVSS 7.5 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
• CVE-2026-70219 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-85340 - CVSS 7.8 (high), 2026-10-13: Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-70215 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-70242 - CVSS 9.8 (critical), 2026-10-13: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-88144 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-88172 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-70254 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-70214 - CVSS 5.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-88109 - CVSS 7.8 (high), 2026-10-13: Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-77902 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97778 - CVSS 8.8 (high), 2026-10-13: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97765 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97774 - CVSS 7 (high), 2026-10-13: Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-97759 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97755 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97739 - CVSS 8.8 (high), 2026-10-13: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97761 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97751 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97771 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97754 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97780 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97747 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97767 - CVSS 8.8 (high), 2026-10-13: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97770 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97776 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97752 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97758 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97003 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97014 - CVSS 5.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.