Microsoft 365 Apps
ProductivityOffice suite including Word, Excel, PowerPoint, Outlook
Latest versions
None of the 666 recorded CVEs could be evaluated against 2608-20326.20132 — this build's version scheme cannot be compared to the fixed versions the sources publish. Treat them as unknown rather than resolved.
These verdicts were computed against 2608-20326.20132 only. We also track Monthly Enterprise Channel 2605-20026.20266 and Semi-Annual Enterprise Channel 2508-19127.20752, which were not evaluated — a CVE fixed in 2608-20326.20132 may still affect those builds.
| CVE | Severity | EPSS pct | Status | Score source | |
|---|---|---|---|---|---|
CVE-2026-21514Exploited | HIGH 7.8 | 73% | Impact unverified | NVD | 10 Feb 2026 |
CVE-2026-21509Exploited | HIGH 7.8 | 99% | Impact unverified | NVD | 26 Jan 2026 |
CVE-2024-38189Exploited | HIGH 8.8 | 94% | Impact unverified | NVD | 13 Aug 2024 |
CVE-2024-21413Exploited | CRITICAL 9.8 | 100% | Impact unverified | NVD | 13 Feb 2024 |
CVE-2023-36761Exploited | MEDIUM 6.5 | 97% | Impact unverified | NVD | 12 Sep 2023 |
CVE-2023-35311Exploited | HIGH 8.8 | 97% | Impact unverified | NVD | 11 Jul 2023 |
CVE-2023-23397Exploited | CRITICAL 9.8 | 100% | Impact unverified | NVD | 14 Mar 2023 |
CVE-2023-21715Exploited | HIGH 7.3 | 96% | Impact unverified | NVD | 14 Feb 2023 |
CVE-2021-42292Exploited | HIGH 7.8 | 99% | Impact unverified | NVD | 10 Nov 2021 |
CVE-2021-38646Exploited | HIGH 7.8 | 94% | Impact unverified | NVD | 15 Sep 2021 |
| — | 50% | Impact unverified | — | 11 Aug 2026 | |
| — | 56% | Impact unverified | — | 11 Aug 2026 | |
| — | 56% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 29% | Impact unverified | — | 11 Aug 2026 | |
| — | 29% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 31% | Impact unverified | — | 11 Aug 2026 | |
| — | 39% | Impact unverified | — | 11 Aug 2026 | |
| — | 25% | Impact unverified | — | 11 Aug 2026 | |
| — | 20% | Impact unverified | — | 11 Aug 2026 |
PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.