# 365 Apps vulnerabilities > 365 Apps is made by Microsoft. We track 349 published vulnerabilities in it, across 1 version. 8 of them are on the list of flaws known to be exploited, the newest added on 6 February 2025. If you run 365 Apps, check your version against the exploited flaws below and patch those first. Canonical page: https://www.precursorintelligence.com/product/microsoft/365_apps ## At a glance - **Made by:** [Microsoft](https://www.precursorintelligence.com/vendors/microsoft) - **Published vulnerabilities:** 349 - **Known to be exploited:** 8 - **Versions tracked:** 1 - **Most recently added to the known-exploited list:** [CVE-2024-21413](https://www.precursorintelligence.com/what-is/cve-2024-21413), 6 February 2025. We keep watching the list. ## Which 365 Apps vulnerabilities are being exploited? 8 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2024-21413](https://www.precursorintelligence.com/what-is/cve-2024-21413): Microsoft Outlook Improper Input Validation Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 6 February 2025. - [CVE-2024-38189](https://www.precursorintelligence.com/what-is/cve-2024-38189): Microsoft Project Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 8.2%, known exploited since 13 August 2024. - [CVE-2023-36761](https://www.precursorintelligence.com/what-is/cve-2023-36761): Microsoft Word Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 20%, known exploited since 12 September 2023. - [CVE-2023-35311](https://www.precursorintelligence.com/what-is/cve-2023-35311): Microsoft Outlook Security Feature Bypass Vulnerability. High, CVSS 8.8, chance of use in 30 days 16%, known exploited since 11 July 2023. - [CVE-2023-23397](https://www.precursorintelligence.com/what-is/cve-2023-23397): Microsoft Office Outlook Privilege Escalation Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 14 March 2023. - [CVE-2023-21715](https://www.precursorintelligence.com/what-is/cve-2023-21715): Microsoft Office Publisher Security Feature Bypass Vulnerability. High, CVSS 7.3, chance of use in 30 days 12%, known exploited since 14 February 2023. - [CVE-2021-38646](https://www.precursorintelligence.com/what-is/cve-2021-38646): Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 8.0%, known exploited since 28 March 2022. - [CVE-2021-42292](https://www.precursorintelligence.com/what-is/cve-2021-42292): Microsoft Excel Security Feature Bypass. High, CVSS 7.8, chance of use in 30 days 43%, known exploited since 17 November 2021. ## Which 365 Apps flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2023-23397](https://www.precursorintelligence.com/what-is/cve-2023-23397): 97%, Critical (CVSS 9.8), known exploited - [CVE-2024-21413](https://www.precursorintelligence.com/what-is/cve-2024-21413): 95%, Critical (CVSS 9.8), known exploited - [CVE-2023-36041](https://www.precursorintelligence.com/what-is/cve-2023-36041): 57%, High (CVSS 7.8) - [CVE-2023-32029](https://www.precursorintelligence.com/what-is/cve-2023-32029): 54%, High (CVSS 7.8) - [CVE-2021-34501](https://www.precursorintelligence.com/what-is/cve-2021-34501): 52%, High (CVSS 7.8) - [CVE-2021-34478](https://www.precursorintelligence.com/what-is/cve-2021-34478): 52%, High (CVSS 7.8) - [CVE-2023-33133](https://www.precursorintelligence.com/what-is/cve-2023-33133): 44%, High (CVSS 7.8) - [CVE-2021-42292](https://www.precursorintelligence.com/what-is/cve-2021-42292): 43%, High (CVSS 7.8), known exploited - [CVE-2020-16947](https://www.precursorintelligence.com/what-is/cve-2020-16947): 34%, High (CVSS 7.5) - [CVE-2023-36413](https://www.precursorintelligence.com/what-is/cve-2023-36413): 30%, Medium (CVSS 6.5) ## Questions ### How many vulnerabilities does 365 Apps have? We track 349 published vulnerabilities listed under the name 365 Apps, across 1 version. The most recent 365 Apps flaw added to the known-exploited list is CVE-2024-21413, on 6 February 2025. ### Which 365 Apps vulnerabilities are being exploited? 8 are on the list of flaws known to be exploited. The most recently added are CVE-2024-21413, CVE-2024-38189 and CVE-2023-36761. ### How do I get alerts for 365 Apps? Create a Precursor Intelligence account and track 365 Apps. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running 365 Apps? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact