M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 11High 407Medium 82Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21413 In wildKEV | 9.8 | Feb 13 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-23397 In wildKEV | 9.8 | Mar 14 | Microsoft Outlook Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-38189 In wildKEV | 8.8 | Aug 13 | Microsoft Project Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-35311 In wildKEV | 8.8 | Jul 11 | Microsoft Outlook Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21514 In wildKEV | 7.8 | Feb 10 | Microsoft Word Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21509 In wildKEV | 7.8 | Jan 26 | Microsoft Office Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2021-42292 In wildKEV | 7.8 | Nov 10 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2021-38646 RansomwareIn wildKEV | 7.8 | Sep 15 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-21715 In wildKEV | 7.3 | Feb 14 | Microsoft Publisher Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-36761 In wildKEV | 6.5 | Sep 12 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
Showing 10
The 500 most important CVEs for this product (exploited first, then by severity)