M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
512
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 11High 351Medium 138Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21413 In wildKEV | 9.8 | Feb 13 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-23397 In wildKEV | 9.8 | Mar 14 | Microsoft Outlook Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-38189 In wildKEV | 8.8 | Aug 13 | Microsoft Project Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-35311 In wildKEV | 8.8 | Jul 11 | Microsoft Outlook Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21514 In wildKEV | 7.8 | Feb 10 | Microsoft Word Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21509 In wildKEV | 7.8 | Jan 26 | Microsoft Office Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2021-42292 In wildKEV | 7.8 | Nov 10 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2021-38646 RansomwareIn wildKEV | 7.8 | Sep 15 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-21715 In wildKEV | 7.3 | Feb 14 | Microsoft Publisher Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-36761 In wildKEV | 6.5 | Sep 12 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70242 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97749 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97016 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-88178 | 9.8 | Oct 13 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-88156 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70300 | 9.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70291 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70096 | 9.8 | Oct 13 | Windows Rich Text Edit Control Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-78509 | 9.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-108451 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108450 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108449 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108447 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108446 | 8.8 | Oct 15 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108445 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108444 | 8.8 | Oct 15 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108443 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108442 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108441 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108440 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108439 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108437 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108432 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108431 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108430 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108429 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108428 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108427 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108426 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97781 | 8.8 | Oct 13 | Microsoft Office OneNote Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-100212 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-100210 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-100209 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-100211 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97745 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97768 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97772 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97775 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97763 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97741 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
The 500 most important CVEs for this product (exploited first, then by severity)