Product:

365_apps

(Microsoft)
Repositories

Unknown:

This might be proprietary software.

#Vulnerabilities 364
Date Id Summary Products Score Patch Annotated
2025-07-08 CVE-2025-48812 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server 5.5
2025-07-08 CVE-2025-49695 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel 8.4
2025-07-08 CVE-2025-49696 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel 8.4
2025-07-08 CVE-2025-49697 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Office_online_server 8.4
2025-07-08 CVE-2025-49698 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Word 7.8
2025-07-08 CVE-2025-49699 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Outlook, Powerpoint, Word 7.0
2025-07-08 CVE-2025-49700 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Word N/A
2025-07-08 CVE-2025-49711 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server 7.8
2025-04-08 CVE-2025-26642 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Access, Excel, Office, Office_long_term_servicing_channel, Office_online_server, Sharepoint_server N/A
2025-04-08 CVE-2025-26642 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Access, Excel, Office, Office_long_term_servicing_channel, Office_online_server, Sharepoint_server N/A