Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 12

Vendor: Microsoft
Software: Microsoft 365 Apps for Enterprise
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 386
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 386 known vulnerabilities: 3 critical, 297 high, 64 medium, 22 low Critical High Medium Low

Vulnerabilities (386)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102798 - Untrusted Pointer Dereference
CVE-2025-21354		 CWE-822 High
No
No
 - 15.01.2025 SB2025011544
#VU102796 - Untrusted Search Path
CVE-2025-21365		 CWE-426 High
No
No
 - 15.01.2025 SB2025011543
#VU102795 - Protection Mechanism Failure
CVE-2025-21346		 CWE-693 High
No
No
 - 15.01.2025 SB2025011543
#VU102762 - Untrusted Pointer Dereference
CVE-2025-21363		 CWE-822 High
No
No
 - 15.01.2025 SB2025011520
#VU102761 - Use After Free
CVE-2025-21345		 CWE-416 High
No
No
 - 15.01.2025 SB2025011519
#VU102760 - Heap-based Buffer Overflow
CVE-2025-21356		 CWE-122 High
No
No
 - 15.01.2025 SB2025011519
#VU102706 - Use of Uninitialized Resource
CVE-2025-21357		 CWE-908 Medium
No
No
 - 14.01.2025 SB2025011477
#VU102696 - Heap-based Buffer Overflow
CVE-2025-21395		 CWE-122 High
No
No
 - 14.01.2025 SB2025011469
#VU102695 - Heap-based Buffer Overflow
CVE-2025-21186		 CWE-122 High
No
No
 - 14.01.2025 SB2025011469
#VU102694 - Use After Free
CVE-2025-21366		 CWE-416 High
No
No
 - 14.01.2025 SB2025011469
#VU101594 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-49059		 CWE-59 Low
No
No
 - 10.12.2024 SB20241210110
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU101546 - Use After Free
CVE-2024-49142		 CWE-416 High
No
No
 - 10.12.2024 SB2024121098
#VU101455 - Use After Free
CVE-2024-49069		 CWE-416 High
No
No
 - 10.12.2024 SB2024121095
#VU100411 - Improper input validation
CVE-2024-49033		 CWE-20 Medium
No
No
 - 12.11.2024 SB20241112166
#VU100404 - Out-of-bounds read
CVE-2024-49031		 CWE-125 High
No
No
 16.0.16731.20948, 16.0.17328.20648, 16.0.17928.20286, 16.0.18025.20214, 16.0.18129.20158 12.11.2024 SB20241112157
#VU100403 - Use After Free
CVE-2024-49032		 CWE-416 High
No
No
 16.0.16731.20948, 16.0.17328.20648, 16.0.17928.20286, 16.0.18025.20214, 16.0.18129.20158 12.11.2024 SB20241112157
#VU100324 - Heap-based Buffer Overflow
CVE-2024-49030		 CWE-122 High
No
No
 - 12.11.2024 SB20241112117
#VU100323 - Out-of-bounds read
CVE-2024-49028		 CWE-125 High
No
No
 - 12.11.2024 SB20241112117
#VU100311 - Use of Uninitialized Resource
CVE-2024-49029		 CWE-908 High
No
No
 - 12.11.2024 SB20241112117


Showing elements 221 - 240 out of 386