Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 15

Vendor: Microsoft
Software: Microsoft 365 Apps for Enterprise
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 491
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 491 known vulnerabilities: 3 critical, 355 high, 103 medium, 30 low Critical High Medium Low

Vulnerabilities (491)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109091 - Heap-based Buffer Overflow
CVE-2025-30376		 CWE-122 High
No
No
 - 13.05.2025 SB2025051392
#VU109090 - Type confusion
CVE-2025-30375		 CWE-843 High
No
No
 - 13.05.2025 SB2025051392
#VU109089 - Type confusion
CVE-2025-30383		 CWE-843 High
No
No
 - 13.05.2025 SB2025051392
#VU109088 - Heap-based Buffer Overflow
CVE-2025-29979		 CWE-122 High
No
No
 - 13.05.2025 SB2025051392
#VU109087 - Untrusted Pointer Dereference
CVE-2025-30381		 CWE-822 High
No
No
 - 13.05.2025 SB2025051392
#VU109086 - Release of invalid pointer or reference
CVE-2025-30379		 CWE-763 High
No
No
 - 13.05.2025 SB2025051392
#VU109085 - Use After Free
CVE-2025-30393		 CWE-416 High
No
No
 - 13.05.2025 SB2025051392
#VU109084 - Use After Free
CVE-2025-29977		 CWE-416 High
No
No
 - 13.05.2025 SB2025051392
#VU109083 - Out-of-bounds read
CVE-2025-32704		 CWE-125 High
No
No
 - 13.05.2025 SB2025051392
#VU107301 - Use After Free
CVE-2025-27751		 CWE-416 High
No
No
 - 09.04.2025 SB2025040964
#VU107300 - Heap-based Buffer Overflow
CVE-2025-27752		 CWE-122 High
No
No
 - 09.04.2025 SB2025040964
#VU107299 - Use After Free
CVE-2025-29823		 CWE-416 High
No
No
 - 09.04.2025 SB2025040964
#VU107298 - Use After Free
CVE-2025-27750		 CWE-416 High
No
No
 - 09.04.2025 SB2025040964
#VU107297 - Type confusion
CVE-2025-29791		 CWE-843 High
No
No
 - 09.04.2025 SB2025040964
#VU107290 - Incomplete List of Disallowed Inputs
CVE-2025-29822		 CWE-184 High
No
No
 - 09.04.2025 SB2025040958
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU107265 - Use After Free
CVE-2025-29820		 CWE-416 High
No
No
 - 09.04.2025 SB2025040924
#VU107264 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-29816		 CWE-349 High
No
No
 - 09.04.2025 SB2025040924
#VU107216 - Use After Free
CVE-2025-29792		 CWE-416 Medium
No
No
 - 08.04.2025 SB2025040874
#VU107209 - Use After Free
CVE-2025-27748		 CWE-416 High
No
No
 - 08.04.2025 SB2025040874


Showing elements 281 - 300 out of 491