VendorsMicrosoft365_appsall versions
Vulnerabilities

Microsoft 365 Apps

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

771CVEs
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
Published 2023-03-14 · Analyzed
9.8KEVEPSS 0.972
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
Published 2024-02-13 · Analyzed
9.8KEVEPSS 0.947
CVE-2020-0901
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
Published 2020-05-21 · Modified
9.8EPSS 0.043
CVE-2026-78510
Microsoft Word Remote Code Execution Vulnerability
Published 2026-09-08 · Modified
9.8EPSS 0.010
CVE-2026-78509
Microsoft Office Outlook Remote Code Execution Vulnerability
Published 2026-09-08 · Analyzed
9.8EPSS 0.010
CVE-2023-33150
Microsoft Office Security Feature Bypass Vulnerability
Published 2023-07-11 · Modified
9.6EPSS 0.021
CVE-2020-16947
Microsoft Outlook Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.338
CVE-2020-1225
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
Published 2020-06-09 · Modified
9.3EPSS 0.171
CVE-2020-1226
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
Published 2020-06-09 · Modified
9.3EPSS 0.171
CVE-2020-1240
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
9.3EPSS 0.126
CVE-2020-1458
A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
9.3EPSS 0.109
CVE-2020-1483
Microsoft Outlook Memory Corruption Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.088
CVE-2020-1449
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
9.3EPSS 0.046
CVE-2020-1495
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.042
CVE-2020-1496
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.042
CVE-2020-1494
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.042
CVE-2020-17065
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-11-11 · Modified
9.3EPSS 0.041
CVE-2020-17062
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Published 2020-11-11 · Modified
9.3EPSS 0.041
CVE-2020-1498
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.039
CVE-2020-16957
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.039
CVE-2020-16918
Base3D Remote Code Execution Vulnerability
Published 2020-10-16 · Modified
9.3EPSS 0.039
CVE-2020-1581
Microsoft Office Click-to-Run Elevation of Privilege Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.037
CVE-2021-1715
Microsoft Word Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
9.3EPSS 0.036
CVE-2021-1716
Microsoft Word Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
9.3EPSS 0.036
CVE-2020-17123
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
9.3EPSS 0.036
CVE-2021-1711
Microsoft Office Remote Code Execution Vulnerability
Published 2021-01-12 · Modified
9.3EPSS 0.036
CVE-2021-27058
Microsoft Office ClickToRun Remote Code Execution Vulnerability
Published 2021-03-11 · Modified
9.3EPSS 0.035
CVE-2020-17124
Microsoft PowerPoint Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
9.3EPSS 0.035
CVE-2020-17125
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
9.3EPSS 0.035
CVE-2020-17129
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
9.3EPSS 0.035
CVE-2020-1563
Microsoft Office Remote Code Execution Vulnerability
Published 2020-08-17 · Modified
9.3EPSS 0.032
CVE-2020-17128
Microsoft Excel Remote Code Execution Vulnerability
Published 2020-12-09 · Modified
9.3EPSS 0.027
CVE-2022-21841
Microsoft Excel Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.3EPSS 0.026
CVE-2024-38200
Microsoft Office Spoofing Vulnerability
Published 2024-08-08 · Modified
9.11 PoCEPSS 0.205
CVE-2021-34501
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-07-14 · Modified
8.8EPSS 0.514
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
Published 2023-07-11 · Analyzed
8.8KEVEPSS 0.155
CVE-2020-1321
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
Published 2020-06-09 · Modified
8.8EPSS 0.116
CVE-2020-1446
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
Published 2020-07-14 · Modified
8.8EPSS 0.112
CVE-2024-21378
Microsoft Outlook Remote Code Execution Vulnerability
Published 2024-02-13 · Modified
8.8EPSS 0.110
CVE-2020-1447
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
Published 2020-07-14 · Modified
8.8EPSS 0.106
1 / 20Next →