Microsoft 365 Apps
905 CVEs affecting Microsoft 365 Apps. Latest disclosed: 2026-10-13. Critical: 12, High: 688.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-97749 | Critical | 9.8 | 2026-10-13 | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-97016 | Critical | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-88178 | Critical | 9.8 | 2026-10-13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-88156 | Critical | 9.8 | 2026-10-13 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-70300 | Critical | 9.8 | 2026-10-13 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-70291 | Critical | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-70242 | Critical | 9.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78509 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2024-21413 | Critical | 9.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-23397 | Critical | 9.8 | 2023-03-14 | Microsoft Outlook Elevation of Privilege Vulnerability |
CVE-2020-0901 | Critical | 9.8 | 2020-05-21 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
CVE-2023-33150 | Critical | 9.6 | 2023-07-11 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2026-97781 | High | 8.8 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code… |
CVE-2026-97780 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97778 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97777 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97776 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97775 | High | 8.8 | 2026-10-13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97773 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97772 | High | 8.8 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |