Microsoft Microsoft 365
255 CVEs affecting Microsoft Microsoft 365. Latest disclosed: 2026-09-08. Critical: 1, High: 160.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78509 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-81952 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-80085 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-80080 | High | 8.8 | 2026-09-08 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78526 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78525 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78524 | High | 8.8 | 2026-09-08 | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-78521 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78518 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-78517 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78514 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78512 | High | 8.8 | 2026-09-08 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78511 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78507 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78505 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-78504 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-77901 | High | 8.8 | 2026-09-08 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-72973 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-72972 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-69797 | High | 8.8 | 2026-09-08 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |