M3
Product
Microsoft 365 Apps for Enterprise
On CISA KEVExploited in the wildRansomware-linked
792
CVEs
10
On KEV
9.8
Max CVSS
164
New 30D
Severity mix
Critical 13High 486Medium 1Low 0
Watch
Add Microsoft 365 Apps for Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49696 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-49695 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-32717 | 8.4 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-47167 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-47164 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-47953 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-47162 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-47957 | 8.4 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-21362 | 8.4 | Jan 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2023-36569 | 8.4 | Oct 10 | Microsoft Office Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-44822 | 8.2 | Jun 9 | Microsoft Excel Information Disclosure Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-88185 | 8.1 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70269 | 8.1 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-100208 | 8.1 | Sep 25 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-108433 | 7.8 | Oct 15 | Microsoft Office Word Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-88210 | 7.8 | Oct 13 | Microsoft Office Word Security Feature Bypass Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-85340 | 7.8 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-88109 | 7.8 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97009 | 7.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-96997 | 7.8 | Oct 13 | Microsoft Office OneNote Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-97001 | 7.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-96996 | 7.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-96995 | 7.8 | Oct 13 | Microsoft Office Word Elevation of Privilege Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-70220 | 7.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-62804 | 7.8 | Sep 8 | Microsoft Word Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-81948 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81950 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81949 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81953 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81959 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20140 |
| CVE-2026-81951 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81388 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81957 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81960 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81956 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81397 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81396 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81954 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81947 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81386 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-81398 | 7.8 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before 16.0.20326.20138 |
| CVE-2026-70130 | 7.8 | Aug 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68817 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68814 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68812 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68805 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68804 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68803 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-68801 | 7.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-66807 | 7.8 | Aug 11 | Microsoft Office Graphics Component Remote Code Execution Vulnerability Affected: 16.0.1 before https://aka.ms/OfficeSecurityReleases |
The 500 most important CVEs for this product (exploited first, then by severity)