Vulnerabilities > Microsoft > 365 Apps > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-02-13 CVE-2024-21413 Unspecified vulnerability in Microsoft products
Microsoft Outlook Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2023-07-11 CVE-2023-33150 Unspecified vulnerability in Microsoft 365 Apps, Office and Word
Microsoft Office Security Feature Bypass Vulnerability
network
low complexity
microsoft
critical
9.6
2023-03-14 CVE-2023-23397 Authentication Bypass by Capture-replay vulnerability in Microsoft products
Microsoft Outlook Elevation of Privilege Vulnerability
network
low complexity
microsoft CWE-294
critical
9.8
2020-07-14 CVE-2020-1240 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft 365 Apps
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
network
microsoft CWE-119
critical
9.3
2020-07-14 CVE-2020-1449 Origin Validation Error vulnerability in Microsoft 365 Apps, Office and Project 2016
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
network
microsoft CWE-346
critical
9.3
2020-07-14 CVE-2020-1458 Untrusted Search Path vulnerability in Microsoft 365 Apps
A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'.
network
microsoft CWE-426
critical
9.3
2020-06-09 CVE-2020-1225 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft 365 Apps, Excel and Office
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
network
microsoft CWE-119
critical
9.3
2020-06-09 CVE-2020-1226 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft 365 Apps, Excel and Office
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
network
microsoft CWE-119
critical
9.3