M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
524
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 11High 360Medium 129Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69477 | 7.3 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2022-33631 | 7.3 | Aug 9 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-55898 | 7.1 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-55122 | 7.1 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-32188 | 7.1 | Apr 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97774 | 7.0 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70276 | 7.0 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-81389 | 7.0 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-47293 | 7.0 | Jun 9 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-44818 | 7.0 | Jun 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
The 500 most important CVEs for this product (exploited first, then by severity)