Skip to content

Known vulnerabilities in Microsoft 365 Apps for Enterprise

Is your version affected?

CVE Summary Score Published
CVE-2026-81398 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-80082 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80081 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-80089 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80090 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80088 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80091 Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80085 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-80087 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80086 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80080 Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-80084 Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-78525 Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-78526 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-80076 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80078 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-78520 Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network 6.5 Medium Sep 8, 2026
CVE-2026-78524 Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-78522 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-80073 Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-78521 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-78519 Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-80079 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-78503 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-78512 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026

Other Microsoft products