365 Apps
by Microsoft
CVEs (601)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-21413 | Cri | 0.83 | 9.8 | 0.95 | KEV | Feb 13, 2024 | Microsoft Outlook Remote Code Execution Vulnerability | |
| CVE-2023-23397 | Cri | 0.83 | 9.8 | 0.97 | KEV | Mar 14, 2023 | Microsoft Outlook Elevation of Privilege Vulnerability | |
| CVE-2024-38189 | Hig | 0.70 | 8.8 | 0.08 | KEV | Aug 13, 2024 | Microsoft Project Remote Code Execution Vulnerability | |
| CVE-2023-35311 | Hig | 0.70 | 8.8 | 0.16 | KEV | Jul 11, 2023 | Microsoft Outlook Security Feature Bypass Vulnerability | |
| CVE-2021-38646 | Hig | 0.69 | 7.8 | 0.08 | KEV | Sep 15, 2021 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | |
| CVE-2026-21509 | Hig | 0.68 | 7.8 | 0.72 | KEV | Jan 26, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. | |
| CVE-2021-42292 | Hig | 0.65 | 7.8 | 0.32 | KEV | Nov 10, 2021 | Microsoft Excel Security Feature Bypass Vulnerability | |
| CVE-2020-0901 | Cri | 0.65 | 9.8 | 0.12 | May 21, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. | ||
| CVE-2026-21514 | Hig | 0.63 | 7.8 | 0.02 | KEV | Feb 10, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. | |
| CVE-2023-33150 | Cri | 0.63 | 9.6 | 0.02 | Jul 11, 2023 | Microsoft Office Security Feature Bypass Vulnerability | ||
| CVE-2023-21715 | Hig | 0.60 | 7.3 | 0.12 | KEV | Feb 14, 2023 | Microsoft Publisher Security Feature Bypass Vulnerability | |
| CVE-2020-1226 | Hig | 0.59 | 8.8 | 0.17 | Jun 9, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225. | ||
| CVE-2020-1225 | Hig | 0.59 | 8.8 | 0.17 | Jun 9, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226. | ||
| CVE-2025-47957 | Hig | 0.58 | 8.4 | 0.01 | Jun 10, 2025 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||
| CVE-2024-21378 | Hig | 0.58 | 8.8 | 0.11 | Feb 13, 2024 | Microsoft Outlook Remote Code Execution Vulnerability | ||
| CVE-2020-1583 | Hig | 0.58 | 8.8 | 0.05 | Aug 17, 2020 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could… | ||
| CVE-2020-1498 | Hig | 0.58 | 8.8 | 0.04 | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | ||
| CVE-2020-1496 | Hig | 0.58 | 8.8 | 0.04 | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | ||
| CVE-2020-1495 | Hig | 0.58 | 8.8 | 0.04 | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | ||
| CVE-2020-1494 | Hig | 0.58 | 8.8 | 0.04 | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… |
- risk 0.83cvss 9.8epss 0.95
Microsoft Outlook Remote Code Execution Vulnerability
- risk 0.83cvss 9.8epss 0.97
Microsoft Outlook Elevation of Privilege Vulnerability
- risk 0.70cvss 8.8epss 0.08
Microsoft Project Remote Code Execution Vulnerability
- risk 0.70cvss 8.8epss 0.16
Microsoft Outlook Security Feature Bypass Vulnerability
- risk 0.69cvss 7.8epss 0.08
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.72
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
- risk 0.65cvss 7.8epss 0.32
Microsoft Excel Security Feature Bypass Vulnerability
- risk 0.65cvss 9.8epss 0.12
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- risk 0.63cvss 7.8epss 0.02
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
- risk 0.63cvss 9.6epss 0.02
Microsoft Office Security Feature Bypass Vulnerability
- risk 0.60cvss 7.3epss 0.12
Microsoft Publisher Security Feature Bypass Vulnerability
- risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
- risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
- risk 0.58cvss 8.4epss 0.01
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- risk 0.58cvss 8.8epss 0.11
Microsoft Outlook Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.05
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could…
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- risk 0.58cvss 8.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
Page 1 of 31