M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
754
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 12High 487Medium 1Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69778 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69764 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69759 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69529 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69742 | 8.8 | Sep 8 | Microsoft Office Publisher Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69722 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69686 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69678 | 8.8 | Sep 8 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69671 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-69556 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70329 | 8.8 | Aug 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-65807 | 8.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-62870 | 8.8 | Aug 3 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40420 | 8.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-35436 | 8.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-38021 | 8.8 | Jul 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-30103 | 8.8 | Jun 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-21378 | 8.8 | Feb 13 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-33153 | 8.8 | Jul 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2022-34717 | 8.8 | Aug 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-47994 | 8.6 | Jul 8 | Microsoft Office Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-78510 | 8.4 | Sep 8 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-55045 | 8.4 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-45463 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-45461 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-45458 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-45456 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-45474 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-45472 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40361 | 8.4 | May 12 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40358 | 8.4 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40366 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40364 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-40363 | 8.4 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-33115 | 8.4 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-33114 | 8.4 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-32190 | 8.4 | Apr 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-20952 | 8.4 | Jan 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-20953 | 8.4 | Jan 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-20944 | 8.4 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-54910 | 8.4 | Sep 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-53784 | 8.4 | Aug 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-53740 | 8.4 | Aug 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-53733 | 8.4 | Aug 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-53731 | 8.4 | Aug 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-49697 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-49696 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-49695 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-32717 | 8.4 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
The 500 most important CVEs for this product (exploited first, then by severity)