CVE Tools
Track your stack

Microsoft 365 Apps

1,119 CVEs tracked. 11 of them are in CISA KEV.

This hub aggregates every CVE we track for Microsoft 365 Apps, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Microsoft 365 Apps CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Microsoft 365 Apps CVEs per month
MonthCVEs
2024-124
2025-0112
2025-028
2025-0311
2025-0415
2025-0513
2025-0615
2025-0713
2025-0814
2025-0913
2025-1016
2025-1111
2025-1213
2026-0111
2026-026
2026-037
2026-0412
2026-0516
2026-0628
2026-0777
2026-0891
2026-09108
2026-10164
2026-11174

Severity

How the 1,119 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical151%
  • High86577%
  • Medium23221%
  • Low71%

Latest CVEs

The 15 most recently published vulnerabilities affecting Microsoft 365 Apps.

  1. CVE-2026-120003Microsoft Office Remote Code Execution Vulnerability8.8
  2. CVE-2026-120001Microsoft Office PowerPoint Remote Code Execution Vulnerability8.8
  3. CVE-2026-119999Microsoft Office Excel Information Disclosure Vulnerability6.5
  4. CVE-2026-119998Microsoft Office Security Feature Bypass Vulnerability6.5
  5. CVE-2026-119997Microsoft Office Outlook Remote Code Execution Vulnerability7.8
  6. CVE-2026-119996Microsoft Office Outlook Remote Code Execution Vulnerability7.5
  7. CVE-2026-119995Microsoft Office Outlook Remote Code Execution Vulnerability7.5
  8. CVE-2026-119993Microsoft Office Outlook Information Disclosure Vulnerability6.5
  9. CVE-2026-118732Microsoft Office Excel Remote Code Execution Vulnerability8.8
  10. CVE-2026-118731Microsoft Office Excel Remote Code Execution Vulnerability8.8
  11. CVE-2026-118730Microsoft Office Excel Remote Code Execution Vulnerability8.8
  12. CVE-2026-118729Microsoft Office Excel Remote Code Execution Vulnerability8.8
  13. CVE-2026-118728Microsoft Office Excel Information Disclosure Vulnerability6.5
  14. CVE-2026-118727Microsoft Office Excel Information Disclosure Vulnerability6.5
  15. CVE-2026-118725Microsoft Office Excel Elevation of Privilege Vulnerability8.8

Product grouping is registry-driven, with AI assist and human review. How it works