M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
512
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 11High 351Medium 138Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70287 | 8.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70282 | 8.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70257 | 8.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70256 | 8.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70268 | 8.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105718 | 8.8 | Oct 13 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105717 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105716 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105598 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105597 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105596 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105595 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105593 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105591 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-102857 | 8.8 | Oct 13 | Microsoft Office Visio Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-102856 | 8.8 | Oct 13 | Microsoft Office Visio Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-102855 | 8.8 | Oct 13 | Microsoft Office Visio Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-102850 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-102849 | 8.8 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70125 | 8.8 | Sep 23 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-81952 | 8.8 | Sep 8 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81955 | 8.8 | Sep 8 | Windows Graphics Component Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81385 | 8.8 | Sep 8 | Microsoft Office Publisher Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-80081 | 8.8 | Sep 8 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-80085 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-80080 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78525 | 8.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78526 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78524 | 8.8 | Sep 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78521 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78519 | 8.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78514 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78512 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78507 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-77901 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-72973 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-72972 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69632 | 8.8 | Sep 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69629 | 8.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69614 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69442 | 8.8 | Sep 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20131.20234 |
| CVE-2026-78518 | 8.8 | Sep 8 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78517 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78504 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78505 | 8.8 | Sep 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-78511 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69285 | 8.8 | Sep 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69797 | 8.8 | Sep 8 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69767 | 8.8 | Sep 8 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69778 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
The 500 most important CVEs for this product (exploited first, then by severity)