Microsoft Microsoft 365 Apps for Enterprise for 64-bit Systems

Name: Microsoft Microsoft 365 Apps for Enterprise for 64-bit Systems
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

16critical249high170medium6low

updated 2026-10-28

vulnerabilities (791)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-21509US	—OT critical	70.8% (99th)	KEV	https://aka.ms/OfficeSecurityReleases	2026-01-26	3 versions
CVE-2026-55040US	—OT critical	69.5% (99th)	KEV	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-32201US	medium6.5OT critical	43.4% (99th)	KEV	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-65660US	high8.8OT critical	8.19% (95th)	KEV	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50522US	—OT critical	3.04% (87th)	KEV	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-21514US	—OT critical	1.59% (76th)	KEV	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-56164US	critical9.8OT critical	1.01% (63rd)	KEV	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-20963US	—OT critical	29.2% (98th)	KEV	no fix	2026-01-13	≤ vers:unknown/*
CVE-2026-58644US	—OT critical	15.9% (97th)	KEV	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-96951US	high8.8OT critical	9.81% (96th)	KEV	no fix	2026-10-13	≤ vers:unknown/*
CVE-2020-1349US	high7.8	22.6% (98th)	Exploit	no fix	2020-07-14	≤ unspecified
CVE-2026-26114US	—	3.15% (88th)	Exploit	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-63520US	—	0.96% (61st)	Exploit	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-45484US	—	35.2% (98th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-33112US	—	31.1% (98th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-20945US	medium5.4	19.1% (97th)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-20947US	—	18.4% (97th)	—	no fix	2026-01-13	≤ vers:unknown/*
CVE-2020-1226US	high8.8	17.5% (97th)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1225US	high8.8	17.5% (97th)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1240US	high8.8	12.6% (96th)	—	no fix	2020-07-14	≤ unspecified
CVE-2020-1321US	high8.8	11.9% (96th)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1446US	high8.8	11.2% (96th)	—	no fix	2020-07-14	≤ unspecified
CVE-2020-1458US	high7.8	10.9% (96th)	—	no fix	2020-07-14	≤ unspecified
CVE-2020-1447US	high8.8	10.6% (96th)	—	no fix	2020-07-14	≤ unspecified
CVE-2026-20959US	medium5.4	7.68% (95th)	—	no fix	2026-01-13	≤ vers:unknown/*
CVE-2020-1342US	medium5.5	6.41% (94th)	—	no fix	2020-07-14	≤ unspecified
CVE-2025-60724US	—	6.29% (94th)	—	no fix	2025-11-11	≤ vers:unknown/*
CVE-2020-1445US	medium5.5	6.12% (93rd)	—	no fix	2020-07-14	≤ unspecified
CVE-2020-1322US	medium6.5	5.62% (93rd)	—	no fix	2020-06-09	≤ unspecified
CVE-2020-1449US	high7.8	4.64% (92nd)	—	no fix	2020-07-14	≤ unspecified
CVE-2020-0901US	critical9.8	4.46% (91st)	—	no fix	2020-05-21	≤ unspecified
CVE-2026-40364US	—	4.42% (91st)	—	https://aka.ms/OfficeSecurityReleases	2026-05-12	3 versions
CVE-2026-21511US	—	3.97% (90th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2020-1229US	medium4.3	3.92% (90th)	—	no fix	2020-06-09	≤ unspecified
CVE-2025-62204US	—	2.21% (83rd)	—	no fix	2025-11-11	≤ vers:unknown/*
CVE-2026-66808US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-66805US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65663US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65658US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64901US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63514US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-35439US	—	2.03% (81st)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-33110US	—	1.97% (80th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-63516US	—	1.87% (79th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-40368US	—	1.82% (79th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-40357US	—	1.70% (77th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-70321US	—	1.69% (77th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65665US	—	1.69% (77th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50515US	—	1.69% (77th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2025-21364US	—	1.67% (77th)	—	https://aka.ms/OfficeSecurityReleases	2025-01-14	2 versions

showing 50 of 791

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow192 CVEs
CWE-125Out-of-bounds Read134 CVEs
CWE-416Use After Free113 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')55 CVEs
CWE-121Stack-based Buffer Overflow38 CVEs
CWE-20Improper Input Validation32 CVEs
CWE-822Untrusted Pointer Dereference29 CVEs
CWE-190Integer Overflow or Wraparound27 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)667 CVEs
USMicrosoft MSRC (CSAF)562 CVEs
EUEU Vulnerability Database (ENISA)14 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan