Office 365 (Microsoft) - vulnerabilities (CVEs)

384 CVEs, 114 in the last 30 days, 6 known versions, newest CVE from 2026-10-15. Vendor: Microsoft.

CVEs of Office 365

• CVE-2026-108454 - CVSS 6.5 (medium), 2026-10-15: Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108455 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108453 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108449 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108448 - CVSS 7.5 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-108446 - CVSS 8.8 (high), 2026-10-15: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-108445 - CVSS 8.8 (high), 2026-10-15: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108443 - CVSS 8.8 (high), 2026-10-15: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108444 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-108442 - CVSS 8.8 (high), 2026-10-15: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108441 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108440 - CVSS 8.8 (high), 2026-10-15: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108439 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108438 - CVSS 6.5 (medium), 2026-10-15: Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108436 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108435 - CVSS 6.5 (medium), 2026-10-15: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108433 - CVSS 7.8 (high), 2026-10-15: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-108434 - CVSS 6.5 (medium), 2026-10-15: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-108432 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108431 - CVSS 8.8 (high), 2026-10-15: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-108430 - CVSS 8.8 (high), 2026-10-15: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-100210 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100209 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100212 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-100211 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97745 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97772 - CVSS 8.8 (high), 2026-10-13: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97768 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97775 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97763 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97746 - CVSS 8.8 (high), 2026-10-13: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97011 - CVSS 8.8 (high), 2026-10-13: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97777 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97742 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97762 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97010 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97738 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97741 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97004 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97757 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97760 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97743 - CVSS 6.5 (medium), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97007 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97773 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97756 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97748 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97769 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97779 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97008 - CVSS 8.8 (high), 2026-10-13: Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-88207 - CVSS 7.5 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-88183 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88186 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-88210 - CVSS 7.8 (high), 2026-10-13: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
• CVE-2026-88185 - CVSS 8.1 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-88184 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88192 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-70281 - CVSS 7.5 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88144 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-70215 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-88154 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-70254 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-77902 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97739 - CVSS 8.8 (high), 2026-10-13: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97759 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97755 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97765 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97778 - CVSS 8.8 (high), 2026-10-13: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97003 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97767 - CVSS 8.8 (high), 2026-10-13: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97770 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97780 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97752 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97776 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97758 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97761 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97747 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97751 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97771 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97754 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97750 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97753 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97001 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-97766 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97005 - CVSS 5.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
• CVE-2026-97744 - CVSS 5.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
• CVE-2026-96997 - CVSS 7.8 (high), 2026-10-13: Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
• CVE-2026-97017 - CVSS 8.8 (high), 2026-10-13: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-97740 - CVSS 6.5 (medium), 2026-10-13: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-96995 - CVSS 7.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
• CVE-2026-88169 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88197 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-88167 - CVSS 6.5 (medium), 2026-10-13: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88178 - CVSS 9.8 (critical), 2026-10-13: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-88196 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-88175 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-88202 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-70301 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-83891 - CVSS 8.8 (high), 2026-10-13: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-88150 - CVSS 8.8 (high), 2026-10-13: Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-88145 - CVSS 8.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.