← Back

365 Apps

365_apps

Vendor: Microsoft • 701 CVEs

CVEs (701)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
6.2 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
Aug 12, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
1Microsoft
1365 Apps
Jun 17, 2026
Jul 8, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
365 CopilotOffice+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
365 CopilotOffice+2 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
365 CopilotOffice+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
365 CopilotOffice+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
8.6 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.