Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 16

Vendor: Microsoft
Software: Microsoft 365 Apps for Enterprise
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 386
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 386 known vulnerabilities: 3 critical, 297 high, 64 medium, 22 low Critical High Medium Low

Vulnerabilities (386)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78075 - Permissions, Privileges, and Access Controls
CVE-2023-33148		 CWE-264 Low
Available
No
 - 11.07.2023 SB2023071162
#VU78073 - Security Features
CVE-2023-33150		 CWE-254 High
No
No
 - 11.07.2023 SB2023071162
#VU78071 - Improper input validation
CVE-2023-33149		 CWE-20 High
No
No
 - 11.07.2023 SB2023071159
#VU77279 - Out-of-bounds write
CVE-2023-33146		 CWE-787 High
Available
No
 2202 14931.21024, 2208 15601.20680, 2302 16130.20580, 2303 16227.20354, 2304 16327.20324, 2305 16501.20210 14.06.2023 SB2023061409
#VU77263 - Improper input validation
CVE-2023-32029		 CWE-20 High
No
No
 2202 14931.21024, 2208 15601.20680, 2302 16130.20580, 2303 16227.20354, 2304 16327.20324, 2305 16501.20210 13.06.2023 SB2023061375
#VU77260 - Improper input validation
CVE-2023-33133		 CWE-20 High
No
No
 2202 14931.21024, 2208 15601.20680, 2302 16130.20580, 2303 16227.20354, 2304 16327.20324, 2305 16501.20210 13.06.2023 SB2023061375
#VU77236 - Memory corruption
CVE-2023-33131		 CWE-119 High
Available
No
 2304 16327.20324, 2305 16501.20210 13.06.2023 SB2023061354
#VU75939 - Security Features
CVE-2023-29335		 CWE-254 Medium
No
No
 - 09.05.2023 SB20230509125
#VU75935 - Improper input validation
CVE-2023-29344		 CWE-20 High
No
No
 - 09.05.2023 SB20230509122
#VU75903 - Improper input validation
CVE-2023-29333		 CWE-20 Low
No
No
 - 09.05.2023 SB2023050997
#VU75899 - Improper input validation
CVE-2023-24953		 CWE-20 High
No
No
 - 09.05.2023 SB2023050993
#VU74975 - Improper input validation
CVE-2023-28295		 CWE-20 High
No
No
 - 11.04.2023 SB2023041194
#VU74973 - Improper input validation
CVE-2023-28287		 CWE-20 High
No
No
 - 11.04.2023 SB2023041194
#VU74968 - Use After Free
CVE-2023-28285		 CWE-416 High
Available
No
 16.0.14931.20964, 16.0.15601.20626, 16.0.16026.20274, 16.0.16130.20394, 16.0.16227.20280 11.04.2023 SB2023041190
#VU74937 - Out-of-bounds write
CVE-2023-28311		 CWE-787 High
Available
No
 16.0.14931.20964, 16.0.15601.20626, 16.0.16026.20274, 16.0.16130.20394, 16.0.16227.20280 11.04.2023 SB2023041179
#VU73582 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-23398		 CWE-451 High
No
No
 - 14.03.2023 SB2023031456
#VU73573 - Improper input validation
CVE-2023-23399		 CWE-20 High
Available
No
 - 14.03.2023 SB2023031456
#VU70976 - Improper input validation
CVE-2023-21738		 CWE-20 High
No
No
 - 10.01.2023 SB2023011060
#VU70974 - Improper input validation
CVE-2023-21737		 CWE-20 High
No
No
 - 10.01.2023 SB2023011060
#VU70971 - Improper input validation
CVE-2023-21736		 CWE-20 High
No
No
 - 10.01.2023 SB2023011060


Showing elements 301 - 320 out of 386