Microsoft 365 Apps for Enterprise for 64-bit Systems

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

2critical18high41medium3low

updated 2026-10-27

vulnerabilities (273)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-23397US	critical9.8OT critical	97.2% (100th)	KEV	https://aka.ms/OfficeSecurityReleases	2023-03-14	2 versions
CVE-2024-21413US	—OT critical	94.7% (100th)	KEV	https://aka.ms/OfficeSecurityReleases	2024-02-13	2 versions
CVE-2021-42292US	medium6.8OT critical	43.0% (99th)	KEV	https://aka.ms/OfficeSecurityReleases	2021-11-10	2 versions
CVE-2026-21514US	—OT critical	1.59% (75th)	KEV	https://aka.ms/OfficeSecurityReleases	2026-02-10	2 versions
CVE-2023-36761US	medium6.5OT critical	19.6% (97th)	KEV	https://aka.ms/OfficeSecurityReleases	2023-09-12	2 versions
CVE-2023-35311US	—OT critical	15.5% (97th)	KEV	https://aka.ms/OfficeSecurityReleases	2023-07-11	2 versions
CVE-2023-21715US	high7.3OT critical	12.0% (96th)	KEV	https://aka.ms/OfficeSecurityReleases	2023-02-14	2 versions
CVE-2024-38189US	—OT critical	8.19% (95th)	KEV	https://aka.ms/OfficeSecurityReleases	2024-08-13	2 versions
CVE-2021-38646US	medium6.8OT critical	7.99% (95th)	KEV	https://aka.ms/OfficeSecurityReleases	2021-09-15	2 versions
CVE-2023-21716US	critical9.8	84.8% (100th)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-02-14	2 versions
CVE-2024-38200US	—	21.7% (98th)	Exploit	https://aka.ms/OfficeSecurityReleases	2024-08-12	2 versions
CVE-2023-35636US	—	17.7% (97th)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-12-12	2 versions
CVE-2024-21378US	—	11.0% (96th)	Exploit	https://aka.ms/OfficeSecurityReleases	2024-02-13	2 versions
CVE-2023-33131US	—	5.72% (93rd)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-06-14	2 versions
CVE-2023-28285US	—	3.01% (87th)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-04-11	2 versions
CVE-2023-28311US	—	2.72% (86th)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-04-11	2 versions
CVE-2023-23399US	—	2.53% (85th)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-03-14	2 versions
CVE-2025-27751US	—	2.48% (85th)	Exploit	https://aka.ms/OfficeSecurityReleases	2025-04-08	2 versions
CVE-2025-47175US	—	2.39% (84th)	Exploit	https://aka.ms/OfficeSecurityReleases	2025-06-10	2 versions
CVE-2025-47165US	—	2.19% (82nd)	Exploit	https://aka.ms/OfficeSecurityReleases	2025-06-10	2 versions
CVE-2023-33148US	—	2.06% (81st)	Exploit	https://aka.ms/OfficeSecurityReleases	2023-07-11	2 versions
CVE-2025-47171US	—	1.68% (77th)	Exploit	https://aka.ms/OfficeSecurityReleases	2025-06-10	2 versions
CVE-2025-47957US	—	1.31% (71st)	Exploit	https://aka.ms/OfficeSecurityReleases	2025-06-10	2 versions
CVE-2025-47176US	—	0.75% (55th)	Exploit	https://aka.ms/OfficeSecurityReleases	2025-06-10	2 versions
CVE-2023-36041US	high7.8	56.7% (99th)	—	https://aka.ms/OfficeSecurityReleases	2023-11-14	2 versions
CVE-2023-32029US	—	53.5% (99th)	—	https://aka.ms/OfficeSecurityReleases	2023-06-14	2 versions
CVE-2021-34501US	medium6.8	51.7% (99th)	—	https://aka.ms/OfficeSecurityReleases	2021-07-14	2 versions
CVE-2021-34478US	medium6.8	51.5% (99th)	—	https://aka.ms/OfficeSecurityReleases	2021-08-12	2 versions
CVE-2023-33133US	—	44.0% (99th)	—	https://aka.ms/OfficeSecurityReleases	2023-06-14	2 versions
CVE-2023-36413US	medium6.5	30.0% (98th)	—	https://aka.ms/OfficeSecurityReleases	2023-11-14	2 versions
CVE-2022-35742US	—	22.3% (98th)	—	https://aka.ms/OfficeSecurityReleases	2023-06-01	2 versions
CVE-2021-38656US	medium6.8	6.73% (94th)	—	https://aka.ms/OfficeSecurityReleases	2021-09-15	2 versions
CVE-2024-43504US	—	6.50% (94th)	—	https://aka.ms/OfficeSecurityReleases	2024-10-08	2 versions
CVE-2021-38655US	medium6.8	6.39% (94th)	—	https://aka.ms/OfficeSecurityReleases	2021-09-15	2 versions
CVE-2021-38659US	medium6.8	6.36% (94th)	—	https://aka.ms/OfficeSecurityReleases	2021-09-15	2 versions
CVE-2021-38654US	medium6.8	6.36% (94th)	—	https://aka.ms/OfficeSecurityReleases	2021-09-15	2 versions
CVE-2021-38653US	medium6.8	6.36% (94th)	—	https://aka.ms/OfficeSecurityReleases	2021-09-15	2 versions
CVE-2021-41368US	medium6.8	4.95% (92nd)	—	https://aka.ms/OfficeSecurityReleases	2021-11-10	2 versions
CVE-2022-22716US	medium4.3	4.60% (92nd)	—	https://aka.ms/OfficeSecurityReleases	2022-02-09	2 versions
CVE-2026-21511US	—	3.97% (90th)	—	https://aka.ms/OfficeSecurityReleases	2026-02-10	2 versions
CVE-2021-34469US	medium5.8OT elevated	3.70% (90th)	—	https://aka.ms/OfficeSecurityReleases	2021-07-14	2 versions
CVE-2021-27058US	high9.3	3.54% (89th)	—	https://aka.ms/OfficeSecurityReleases	2021-03-11	2 versions
CVE-2024-38021US	—	3.50% (89th)	—	https://aka.ms/OfficeSecurityReleases	2024-07-09	2 versions
CVE-2024-30103US	—	3.42% (89th)	—	https://aka.ms/OfficeSecurityReleases	2024-06-11	2 versions
CVE-2023-33151US	—	3.40% (89th)	—	https://aka.ms/OfficeSecurityReleases	2023-07-11	2 versions
CVE-2025-47994US	high8.6	3.28% (88th)	—	https://aka.ms/OfficeSecurityReleases	2025-07-08	2 versions
CVE-2024-20677US	—	3.26% (88th)	—	https://aka.ms/OfficeSecurityReleases	2024-01-09	2 versions
CVE-2022-30174US	medium6.8	3.22% (88th)	—	https://aka.ms/OfficeSecurityReleases	2022-06-15	2 versions
CVE-2023-36767US	medium4.3	3.14% (88th)	—	https://aka.ms/OfficeSecurityReleases	2023-09-12	2 versions
CVE-2022-21840US	high8.8	3.10% (88th)	—	https://aka.ms/OfficeSecurityReleases	2022-01-11	2 versions

showing 50 of 273

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free77 CVEs
CWE-20Improper Input Validation65 CVEs
CWE-122Heap-based Buffer Overflow29 CVEs
CWE-125Out-of-bounds Read23 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor18 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')18 CVEs
CWE-254CWE-25410 CVEs
CWE-787Out-of-bounds Write10 CVEs

sources (1)

Which sources assert this record, and when.

USMicrosoft MSRC (CSAF)273 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan