Known vulnerabilities in Microsoft Office 365

Vendor: Microsoft
Software: Microsoft Office
Version: 365
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 4
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 365 Microsoft Office 365 is affected by 7 vulnerabilities: 2 critical, 2 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80655 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36761		 CWE-200 High
No
Exploited
 - 12.09.2023 SB2023091249
#VU79575 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36769		 CWE-451 Medium
No
No
 - 16.08.2023 SB2023081611
#VU79148 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36893		 CWE-451 Medium
No
No
 - 08.08.2023 SB2023080866
#VU73511 - Exposure of sensitive information to an unauthorized actor
CVE-2023-23397		 CWE-200 Critical
Public exploit available
Exploited
 - 14.03.2023 SB2023031428
#VU72193 - Out-of-bounds read
CVE-2023-21714		 CWE-125 Low
No
No
 - 14.02.2023 SB2023021434
#VU72192 - Memory corruption
CVE-2023-21716		 CWE-119 High
Public exploit available
Exploited
 - 14.02.2023 SB2023021433
#VU72168 - Security Features
CVE-2023-21715		 CWE-254 Critical
No
Exploited
 - 14.02.2023 SB2023021418