M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
600
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 11High 431Medium 58Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41031 | 7.8 | Oct 11 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2022-38048 | 7.8 | Oct 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108448 | 7.5 | Oct 15 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-88207 | 7.5 | Oct 13 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70281 | 7.5 | Oct 13 | Microsoft Office Outlook Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105715 | 7.5 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105714 | 7.5 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105599 | 7.5 | Oct 13 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-105592 | 7.5 | Oct 13 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-77898 | 7.5 | Sep 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69739 | 7.5 | Sep 8 | Microsoft Office Information Disclosure Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-70105 | 7.5 | Aug 20 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21511 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21260 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-69477 | 7.3 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2022-33631 | 7.3 | Aug 9 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-55898 | 7.1 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-55122 | 7.1 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-32188 | 7.1 | Apr 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-62202 | 7.1 | Nov 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-60726 | 7.1 | Nov 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97774 | 7.0 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70276 | 7.0 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-81389 | 7.0 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-47293 | 7.0 | Jun 9 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-44818 | 7.0 | Jun 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
The 500 most important CVEs for this product (exploited first, then by severity)