microsoft_365 vulnerabilities
CVEs whose affected-version data names the microsoft_365 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
180 CVEsRSS
CVE-2026-88183Medium· 6.5Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88178Critical· 9.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88175Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167Medium· 6.5Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88156Critical· 9.8Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-88154Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88150High· 8.8Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88145High· 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-88144High· 8.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-83891High· 8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77902High· 8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70302High· 8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70301High· 8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70291Critical· 9.8Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70287High· 8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70281High· 7.5Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-70269High· 8.1Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70268High· 8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70263Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70254High· 8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70220High· 7.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70215High· 8.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-70206Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-105718High· 8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-105715High· 7.5Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-105599High· 7.5Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-102858High· 8.8Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-100212High· 8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-100211High· 8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.