M3
Product
Microsoft 365 Apps for Enterprise
by Microsoft · last CVE Oct 15, 2026
On CISA KEVExploited in the wildRansomware-linked
547
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 11High 383Medium 106Low 0
Watch

Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-38189
In wildKEV
8.8
8%
Aug 13
Microsoft Project Remote Code Execution Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
CVE-2023-35311
In wildKEV
8.8
16%
Jul 11
Microsoft Outlook Security Feature Bypass Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
CVE-2026-21514
In wildKEV
7.8
2%
Feb 10
Microsoft Word Security Feature Bypass Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
CVE-2026-21509
In wildKEV
7.8
71%
Jan 26
Microsoft Office Security Feature Bypass Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
CVE-2021-42292
In wildKEV
7.8
43%
Nov 10
Microsoft Excel Security Feature Bypass Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
CVE-2021-38646
RansomwareIn wildKEV
7.8
8%
Sep 15
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
CVE-2023-21715
In wildKEV
7.3
12%
Feb 14
Microsoft Publisher Security Feature Bypass Vulnerability
Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases
Showing 7
The 500 most important CVEs for this product (exploited first, then by severity)