Known vulnerabilities in Microsoft 365 Apps for Enterprise - page 4

Vendor: Microsoft
Software: Microsoft 365 Apps for Enterprise
Software CPE: cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 386
Public exploits: 13
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft 365 Apps for Enterprise Microsoft 365 Apps for Enterprise is affected by 386 known vulnerabilities: 3 critical, 297 high, 64 medium, 22 low Critical High Medium Low

Vulnerabilities (386)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26144		 CWE-79 Low
No
No
 - 11.03.2026 SB2026031105
#VU122587 - Deserialization of Untrusted Data
CVE-2026-21511		 CWE-502 Medium
No
No
 - 10.02.2026 SB2026021093
#VU122586 - Exposure of sensitive information to an unauthorized actor
CVE-2026-21260		 CWE-200 Medium
No
No
 - 10.02.2026 SB2026021093
#VU122585 - Out-of-bounds read
CVE-2026-21261		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021092
#VU122584 - Out-of-bounds read
CVE-2026-21258		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021092
#VU122583 - Heap-based Buffer Overflow
CVE-2026-21259		 CWE-122 High
No
No
 - 10.02.2026 SB2026021092
#VU122540 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-21514		 CWE-807 Critical
No
Exploited
 16.0.19725.20058 10.02.2026 SB2026021053
#VU121459 - Untrusted Pointer Dereference
CVE-2026-20948		 CWE-822 High
No
No
 - 14.01.2026 SB20260114105
#VU121458 - Out-of-bounds read
CVE-2026-20944		 CWE-125 High
No
No
 - 14.01.2026 SB20260114105
#VU121457 - Use After Free
CVE-2026-20952		 CWE-416 High
No
No
 - 14.01.2026 SB20260114104
#VU121456 - Use After Free
CVE-2026-20953		 CWE-416 High
No
No
 - 14.01.2026 SB20260114104
#VU121289 - Improper Access Control
CVE-2026-20949		 CWE-284 High
No
No
 - 13.01.2026 SB20260113102
#VU121287 - Use After Free
CVE-2026-20950		 CWE-416 High
No
No
 - 13.01.2026 SB20260113102
#VU121285 - Integer underflow
CVE-2026-20957		 CWE-191 High
No
No
 - 13.01.2026 SB20260113102
#VU121284 - Out-of-bounds read
CVE-2026-20946		 CWE-125 High
No
No
 - 13.01.2026 SB20260113102
#VU121283 - Untrusted Pointer Dereference
CVE-2026-20956		 CWE-822 High
No
No
 - 13.01.2026 SB20260113102
#VU121282 - Untrusted Pointer Dereference
CVE-2026-20955		 CWE-822 High
No
No
 - 13.01.2026 SB20260113102
#VU119495 - Use After Free
CVE-2025-62559		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119494 - Use After Free
CVE-2025-62558		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119493 - Use After Free
CVE-2025-62555		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993


Showing elements 61 - 80 out of 386