Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 25

Vendor: Microsoft
Software: Microsoft 365 Apps for Enterprise
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 495
Public exploits: 13
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 495 known vulnerabilities: 3 critical, 357 high, 104 medium, 31 low Critical High Medium Low

Vulnerabilities (495)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155603 - Command injection
CVE-2026-97781		 CWE-77 High
No
No
 16.0.20228.20274, 16.0.20228.20276, 16.0.20326.20230, 16.0.20326.20232, 16.0.20430.20178, 16.0.20430.20180, 16.0.20430.20182 14.10.2026 SB2026101479
#VU155596 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-97774		 CWE-367 Low
No
No
 16.0.20228.20274, 16.0.20228.20276, 16.0.20326.20230, 16.0.20326.20232, 16.0.20430.20178, 16.0.20430.20180, 16.0.20430.20182 14.10.2026 SB2026101480
#VU155566 - Use After Free
CVE-2026-97743		 CWE-416 Medium
No
No
 16.0.20228.20274, 16.0.20228.20276, 16.0.20326.20230, 16.0.20326.20232, 16.0.20430.20178, 16.0.20430.20180, 16.0.20430.20182 14.10.2026 SB2026101481
#VU155564 - Heap-based Buffer Overflow
CVE-2026-97741		 CWE-122 High
No
No
 16.0.20228.20274, 16.0.20228.20276, 16.0.20326.20230, 16.0.20326.20232, 16.0.20430.20178, 16.0.20430.20180, 16.0.20430.20182 14.10.2026 SB2026101481
#VU56572 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38656		 CWE-94 High
No
No
 - 14.09.2021 SB2021091442
#VU56570 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38659		 CWE-94 High
No
No
 - 14.09.2021 SB2021091441
#VU56511 - Exposure of sensitive information to an unauthorized actor
CVE-2021-38657		 CWE-200 Low
No
No
 - 14.09.2021 SB2021091422
#VU55704 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34478		 CWE-94 High
No
No
 - 10.08.2021 SB2021081020
#VU53887 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31940		 CWE-94 High
No
No
 - 08.06.2021 SB2021060814
#VU52142 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28449		 CWE-94 High
No
No
 - 13.04.2021 SB2021041328
#VU51334 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27058		 CWE-94 High
No
No
 - 09.03.2021 SB2021030942
#VU47624 - Memory corruption
CVE-2020-16957		 CWE-119 High
No
No
 - 13.10.2020 SB2020101368
#VU47617 - Memory corruption
CVE-2020-16918		 CWE-119 High
No
No
 - 13.10.2020 SB2020101362
#VU29905 - Memory corruption
CVE-2020-1240		 CWE-119 High
No
No
 - 15.07.2020 SB2020071514
#VU29735 - Uncontrolled Search Path Element
CVE-2020-1458		 CWE-427 High
No
No
 - 14.07.2020 SB2020071415


Showing elements 481 - 500 out of 495