Microsoft 365 Apps vulnerabilities
936 published vulnerabilities in Microsoft 365 Apps, 10 of them exploited in the wild. The most were published in 2026 (515), and 515 so far in 2026.
Microsoft 365 Apps vulnerabilities by year
2020
2021
2022
2023
2024
2025
2026
Most exploited Microsoft 365 Apps vulnerabilities
- CVE-2024-21413 Microsoft Outlook Improper Input Validation
- CVE-2023-23397 Microsoft Office Outlook Privilege Escalation
- CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability
- CVE-2023-35311 Microsoft Outlook Security Feature Bypass
- CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision
- CVE-2026-21509 Microsoft Office Security Feature Bypass
- CVE-2021-42292 Microsoft Excel Security Feature Bypass
- CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution
- CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass
- CVE-2023-36761 Microsoft Word Information Disclosure
- CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability
- CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.