CVE-20XX-?

Microsoft 365 Apps CVEs.

Published CVEs affecting Microsoft 365 Apps, ranked by exploit odds.

13 CVEs · updated 2026-11-06 06:52 UTC

Reset all
  1. CVE-2026-21511

    Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

    Code execution Microsoft 365 Apps

    7.5 HIGH 4% exploit odds Fix listed
  2. CVE-2025-47994

    Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 3% exploit odds Fix listed
  3. CVE-2026-81385

    Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

    Code execution Microsoft 365 Apps

    8.8 HIGH 1% exploit odds Fix listed
  4. CVE-2025-29791

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 1% exploit odds Fix listed
  5. CVE-2026-97746

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Code execution Microsoft 365 Apps

    8.8 HIGH 0.9% exploit odds Fix listed
  6. CVE-2026-88150

    Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Code execution Microsoft 365 Apps

    8.8 HIGH 0.8% exploit odds Fix listed
  7. CVE-2025-49702

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 0.7% exploit odds Fix listed
  8. CVE-2026-108443

    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Code execution Microsoft 365 Apps

    8.8 HIGH 0.6% exploit odds Fix listed
  9. CVE-2026-20955

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 0.6% exploit odds Fix listed
  10. CVE-2026-20948

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 0.6% exploit odds Fix listed
  11. CVE-2025-62200

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 0.5% exploit odds Fix listed
  12. CVE-2026-20956

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    7.8 HIGH 0.4% exploit odds Fix listed
  13. CVE-2026-33114

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    Code execution Microsoft 365 Apps

    8.4 HIGH 0.3% exploit odds Fix listed

All CVEs affecting Microsoft 365 Apps that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.