CVE Tools
Track your stack

Microsoft 365 Apps

945 CVEs tracked. 10 of them are in CISA KEV.

This hub aggregates every CVE we track for Microsoft 365 Apps, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Microsoft 365 Apps CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Microsoft 365 Apps CVEs per month
MonthCVEs
2024-118
2024-124
2025-0112
2025-028
2025-0311
2025-0415
2025-0513
2025-0615
2025-0713
2025-0814
2025-0913
2025-1016
2025-1111
2025-1213
2026-0111
2026-026
2026-037
2026-0412
2026-0516
2026-0628
2026-0777
2026-0891
2026-09108
2026-10164

Severity

How the 945 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical152%
  • High71676%
  • Medium20722%
  • Low71%

Latest CVEs

The 15 most recently published vulnerabilities affecting Microsoft 365 Apps.

  1. CVE-2026-108454Microsoft Office PowerPoint Information Disclosure Vulnerability6.5
  2. CVE-2026-108455Microsoft Office PowerPoint Information Disclosure Vulnerability6.5
  3. CVE-2026-108453Microsoft Office PowerPoint Information Disclosure Vulnerability6.5
  4. CVE-2026-108450Microsoft Office Word Remote Code Execution Vulnerability8.8
  5. CVE-2026-108451Microsoft Office Word Remote Code Execution Vulnerability8.8
  6. CVE-2026-108449Microsoft Office Word Remote Code Execution Vulnerability8.8
  7. CVE-2026-108447Microsoft Office Word Remote Code Execution Vulnerability8.8
  8. CVE-2026-108446Microsoft Office Excel Remote Code Execution Vulnerability8.8
  9. CVE-2026-108448Microsoft Office Outlook Remote Code Execution Vulnerability7.5
  10. CVE-2026-108445Microsoft Office Word Remote Code Execution Vulnerability8.8
  11. CVE-2026-108444Microsoft Office Remote Code Execution Vulnerability8.8
  12. CVE-2026-108443Microsoft Office Word Remote Code Execution Vulnerability8.8
  13. CVE-2026-108441Microsoft Office Word Remote Code Execution Vulnerability8.8
  14. CVE-2026-108442Microsoft Office Word Remote Code Execution Vulnerability8.8
  15. CVE-2026-108440Microsoft Office Word Remote Code Execution Vulnerability8.8

Product grouping is registry-driven, with AI assist and human review. How it works