Microsoft Microsoft 365 Apps for Enterprise vulnerabilities
928 published CVEs name Microsoft Microsoft 365 Apps for Enterprise among the affected products; CISA lists 10 of them as exploited in the wild.
- Published CVEs
- 928
- Last 12 months
- 540
- Critical
- 14
- Known exploited
- 10
Critical 14High 704Medium 203Low 7Not scored 0
CVEs per yearBy the year they were published
- 202048
- 202164
- 202247
- 202357
- 202442
- 2025154
- 2026516
Known exploitedNewest addition to KEV first
- CVE-2026-21514
Microsoft Word Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedHigh7.8 - CVE-2026-21509
Microsoft Office Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedHigh7.8 - CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedCritical9.8 - CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
Microsoft · Microsoft Office 2019
ExploitedHigh8.8 - CVE-2023-36761
Microsoft Word Information Disclosure Vulnerability
Microsoft · Microsoft Office 2019
ExploitedMedium6.5 - CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedHigh8.8 - CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
Microsoft · Microsoft Office LTSC 2021
ExploitedCritical9.8 - CVE-2023-21715
Microsoft Publisher Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedHigh7.3 - CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedHigh7.8 - CVE-2021-42292
Microsoft Excel Security Feature Bypass Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedHigh7.8
Newest CVEs
- CVE-2026-108455
Microsoft Office PowerPoint Information Disclosure Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
Medium6.5 - CVE-2026-108454
Microsoft Office PowerPoint Information Disclosure Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
Medium6.5 - CVE-2026-108453
Microsoft Office PowerPoint Information Disclosure Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
Medium6.5 - CVE-2026-108451
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8 - CVE-2026-108450
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8 - CVE-2026-108449
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8 - CVE-2026-108448
Microsoft Office Outlook Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High7.5 - CVE-2026-108447
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8 - CVE-2026-108446
Microsoft Office Excel Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8 - CVE-2026-108445
Microsoft Office Word Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
High8.8