Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 17

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 386
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 386 known vulnerabilities: 3 critical, 297 high, 64 medium, 22 low Critical High Medium Low

Vulnerabilities (386)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70981 - Exposure of sensitive information to an unauthorized actor
CVE-2023-21741
CWE-200 Medium
No
No
- 10.01.2023 SB2023011060
#VU70970 - Improper input validation
CVE-2023-21735
CWE-20 High
No
No
- 10.01.2023 SB2023011057
#VU70969 - Improper input validation
CVE-2023-21734
CWE-20 High
No
No
- 10.01.2023 SB2023011057
#VU70227 - Improper input validation
CVE-2022-44691
CWE-20 High
No
No
- 13.12.2022 SB2022121383
#VU70225 - Use After Free
CVE-2022-44695
CWE-416 Low
No
No
- 13.12.2022 SB2022121382
#VU70222 - Out-of-bounds write
CVE-2022-44696
CWE-787 High
No
No
- 13.12.2022 SB2022121382
#VU70221 - Memory corruption
CVE-2022-44694
CWE-119 High
No
No
- 13.12.2022 SB2022121382
#VU70176 - Use After Free
CVE-2022-44692
CWE-416 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU70175 - Improper input validation
CVE-2022-47213
CWE-20 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU70174 - Out-of-bounds write
CVE-2022-47212
CWE-787 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU70173 - Stack-based buffer overflow
CVE-2022-47211
CWE-121 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU70172 - Stack-based buffer overflow
CVE-2022-26806
CWE-121 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU70171 - Use After Free
CVE-2022-26805
CWE-416 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU70170 - Use After Free
CVE-2022-26804
CWE-416 High
No
No
16.0.14326.21248, 16.0.14931.20858, 16.0.15601.20378, 16.0.15629.20298, 16.0.15726.20262, 16.0.15831.20208 13.12.2022 SB2022121347
#VU69143 - Improper input validation
CVE-2022-41063
CWE-20 High
No
No
- 09.11.2022 SB2022110904
#VU69142 - Improper input validation
CVE-2022-41106
CWE-20 High
No
No
- 09.11.2022 SB2022110904
#VU69141 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41105
CWE-200 Medium
No
No
- 09.11.2022 SB2022110904
#VU69140 - Security Features
CVE-2022-41104
CWE-254 Medium
No
No
- 09.11.2022 SB2022110904
#VU69139 - Improper input validation
CVE-2022-41107
CWE-20 High
No
No
- 09.11.2022 SB2022110903
#VU69085 - Improper input validation
CVE-2022-41061
CWE-20 High
No
No
- 08.11.2022 SB2022110818


Showing elements 321 - 340 out of 386