What’s Vulnerable › Products
Microsoft 365 Apps vulnerabilities
938 known vulnerabilities, 10 confirmed exploited in the wild (CISA KEV), 541 published in the last 12 months.
Check whether your Microsoft 365 Apps version is affected
Exploited Microsoft 365 Apps vulnerabilities
- CVE-2026-21514 — Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
- CVE-2026-21509 — Microsoft Office Security Feature Bypass Vulnerability
- CVE-2024-21413 — Microsoft Outlook Improper Input Validation Vulnerability
- CVE-2024-38189 — Microsoft Project Remote Code Execution Vulnerability
- CVE-2023-36761 — Microsoft Word Information Disclosure Vulnerability
- CVE-2023-35311 — Microsoft Outlook Security Feature Bypass Vulnerability
- CVE-2023-23397 — Microsoft Office Outlook Privilege Escalation Vulnerability
- CVE-2023-21715 — Microsoft Office Publisher Security Feature Bypass Vulnerability
- CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- CVE-2021-42292 — Microsoft Excel Security Feature Bypass
Latest Microsoft 365 Apps vulnerabilities
- CVE-2026-108455 — Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108454 — Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108453 — Microsoft Office PowerPoint Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108451 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108450 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108449 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108448 — Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 7.5)
- CVE-2026-108447 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108446 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108445 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108444 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108443 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108442 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108441 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108440 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108439 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108438 — Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108437 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108436 — Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108435 — Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108434 — Microsoft Office Word Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-108433 — Microsoft Office Word Security Feature Bypass Vulnerability (CVSS 7.8)
- CVE-2026-108432 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108431 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-108430 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8)