Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 18

Vendor: Microsoft
Software: Microsoft 365 Apps for Enterprise
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 491
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 491 known vulnerabilities: 3 critical, 355 high, 103 medium, 30 low Critical High Medium Low

Vulnerabilities (491)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100404 - Out-of-bounds read
CVE-2024-49031		 CWE-125 High
No
No
 16.0.16731.20948, 16.0.17328.20648, 16.0.17928.20286, 16.0.18025.20214, 16.0.18129.20158 12.11.2024 SB20241112157
#VU100403 - Use After Free
CVE-2024-49032		 CWE-416 High
No
No
 16.0.16731.20948, 16.0.17328.20648, 16.0.17928.20286, 16.0.18025.20214, 16.0.18129.20158 12.11.2024 SB20241112157
#VU100324 - Heap-based Buffer Overflow
CVE-2024-49030		 CWE-122 High
No
No
 - 12.11.2024 SB20241112117
#VU100323 - Out-of-bounds read
CVE-2024-49028		 CWE-125 High
No
No
 - 12.11.2024 SB20241112117
#VU100322 - Command injection
CVE-2024-49026		 CWE-77 High
No
No
 - 12.11.2024 SB20241112117
#VU100321 - Use After Free
CVE-2024-49027		 CWE-416 High
No
No
 - 12.11.2024 SB20241112117
#VU100311 - Use of Uninitialized Resource
CVE-2024-49029		 CWE-908 High
No
No
 - 12.11.2024 SB20241112117
#VU98248 - Untrusted Search Path
CVE-2024-43576		 CWE-426 Medium
No
No
 - 09.10.2024 SB2024100912
#VU98247 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43609		 CWE-200 Medium
No
No
 - 09.10.2024 SB2024100912
#VU98246 - Untrusted Search Path
CVE-2024-43616		 CWE-426 High
No
No
 - 09.10.2024 SB2024100912
#VU98241 - Use After Free
CVE-2024-43504		 CWE-416 High
Available
No
 - 09.10.2024 SB2024100908
#VU98211 - Insufficient UI Warning of Dangerous Operations
CVE-2024-43505		 CWE-357 High
No
No
 - 08.10.2024 SB2024100883
#VU97616 - Memory corruption
CVE-2024-38016		 CWE-119 High
No
No
 16.0.5465.1001 19.09.2024 SB2024091966
#VU97097 - Use After Free
CVE-2024-43465		 CWE-416 High
No
No
 - 10.09.2024 SB20240910135
#VU97062 - Use After Free
CVE-2024-43463		 CWE-416 High
No
No
 - 10.09.2024 SB20240910120
#VU95982 - Heap-based Buffer Overflow
CVE-2024-38169		 CWE-122 High
No
No
 - 14.08.2024 SB2024081418
#VU95974 - Heap-based Buffer Overflow
CVE-2024-38170		 CWE-122 High
No
No
 - 14.08.2024 SB2024081411
#VU95973 - Heap-based Buffer Overflow
CVE-2024-38172		 CWE-122 High
No
No
 - 14.08.2024 SB2024081411
#VU95971 - External Control of File Name or Path
CVE-2024-38173		 CWE-73 Medium
No
No
 - 14.08.2024 SB2024081409
#VU95964 - Use After Free
CVE-2024-38171		 CWE-416 High
No
No
 - 14.08.2024 SB2024081407


Showing elements 341 - 360 out of 491