Microsoft 365 Apps
ProductivityOffice suite including Word, Excel, PowerPoint, Outlook
Latest versions
None of the 936 recorded CVEs could be evaluated against 2609-20430.20182 — this build's version scheme cannot be compared to the fixed versions the sources publish. Treat them as unknown rather than resolved.
These verdicts were computed against 2609-20430.20182 only. We also track Monthly Enterprise Channel 2607-20228.20276 and Semi-Annual Enterprise Channel 2508-19127.20752, which were not evaluated — a CVE fixed in 2609-20430.20182 may still affect those builds.
| CVE | Severity | EPSS pct | Status | Score source | |
|---|---|---|---|---|---|
CVE-2026-21514Exploited | HIGH 7.8 | 75% | Impact unverified | NVD | 10 Feb 2026 |
CVE-2026-21509Exploited | HIGH 7.8 | 99% | Impact unverified | NVD | 26 Jan 2026 |
CVE-2024-38189Exploited | HIGH 8.8 | 95% | Impact unverified | NVD | 13 Aug 2024 |
CVE-2024-21413Exploited | CRITICAL 9.8 | 100% | Impact unverified | NVD | 13 Feb 2024 |
CVE-2023-36761Exploited | MEDIUM 6.5 | 97% | Impact unverified | NVD | 12 Sep 2023 |
CVE-2023-35311Exploited | HIGH 8.8 | 97% | Impact unverified | NVD | 11 Jul 2023 |
CVE-2023-23397Exploited | CRITICAL 9.8 | 100% | Impact unverified | NVD | 14 Mar 2023 |
CVE-2023-21715Exploited | HIGH 7.3 | 96% | Impact unverified | NVD | 14 Feb 2023 |
CVE-2021-42292Exploited | HIGH 7.8 | 99% | Impact unverified | NVD | 10 Nov 2021 |
CVE-2021-38646Exploited | HIGH 7.8 | 95% | Impact unverified | NVD | 15 Sep 2021 |
| — | 42% | Impact unverified | — | 15 Oct 2026 | |
| — | 42% | Impact unverified | — | 15 Oct 2026 | |
| — | 43% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 26% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 36% | Impact unverified | — | 15 Oct 2026 | |
| — | 37% | Impact unverified | — | 15 Oct 2026 | |
| — | 37% | Impact unverified | — | 15 Oct 2026 | |
| — | 37% | Impact unverified | — | 15 Oct 2026 |
PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.