Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Search results
CVE-LINKED INVENTORY588 SECURITY RECORDS

Microsoft

Microsoft 365 Apps for Enterprise

Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.

Lifecycle evidence status

This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.

A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.

CVE-observed version history

CVEPublishedAffected versionsFixed version informationPublisher evidence
CVE-2026-45472 9 Jun 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 < 16.0.5556.1005; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 < 16.110.26061317; Microsoft Office for Android: 16.0.1 < 16.0.20131.20024; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.110.26061317 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-45475 9 Jun 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 < 16.0.5556.1005; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 < 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.110.26061317; Microsoft SharePoint Enterprise Server 2016: 16.0.0 < 16.0.5556.1005; Microsoft SharePoint Server 2019: 16.0.0 < 16.0.10417.20153; Microsoft SharePoint Server Subscription Edition: 16.0.0 < 16.0.19725.20384 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-45469 9 Jun 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 < 16.0.5556.1001; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 365 for Mac: 1.0.0 < 16.110.26061317; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.110.26061317; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.110.26061317; Office Online Server: 16.0.0.0 < 16.0.10417.20137 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40420 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-35436 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40418 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40367 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.0 < 16.0.5552.1002; 16.0.0 < 16.0.10417.20128 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40362 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5552.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.0.0 < 16.0.10417.20128 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40361 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.1 < 16.0.5552.1000 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40359 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5552.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.0.0 < 16.0.10417.20128 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40358 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < 16.0.5552.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40421 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.0.5552.1000 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40419 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40366 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.1 < 16.0.5552.1000 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40364 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.1 < 16.0.5552.1000 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40363 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < 16.0.5552.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.0.19822.20190; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-40360 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5552.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.109.26051019; 16.0.0 < 16.109.26051019; 16.0.0.0 < 16.0.10417.20128 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-35440 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.0.5552.1000 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-21530 12 May 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < 16.0.5556.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 10.0.14393.0 < 10.0.14393.9140; 10.0.17763.0 < 10.0.17763.8755; 10.0.19044.0 < 10.0.19044.7291 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-33115 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-33114 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32200 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft PowerPoint 2016: 16.0.0 < 16.0.5548.1001 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32199 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 < 16.0.5548.1000; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219; Office Online Server: 16.0.0.0 < 16.0.10417.20113 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32198 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 < 16.0.5548.1000; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219; Office Online Server: 16.0.0.0 < 16.0.10417.20113 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32197 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 < 16.0.5548.1000; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219; Office Online Server: 16.0.0.0 < 16.0.10417.20113 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32190 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office 2016: 16.0.0 < 16.0.5548.1000; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-23657 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-33822 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-33095 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32189 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 < 16.0.5548.1000; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219; Office Online Server: 16.0.0.0 < 16.0.10417.20113 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-32188 14 Apr 2026 Microsoft 365 Apps for Enterprise: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Excel 2016: 16.0.0.0 < 16.0.5548.1000; Microsoft Office 2019: 19.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021: 16.0.1 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2024: 16.0.0 < https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC for Mac 2021: 16.0.1 < 16.108.26041219; Microsoft Office LTSC for Mac 2024: 16.0.0 < 16.108.26041219; Office Online Server: 16.0.0.0 < 16.0.10417.20113 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26144 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26110 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < 16.0.5543.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.0.19822.20000; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.107.26030819; 16.0.0 < 16.107.26030819 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26109 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5543.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.107.26030819; 16.0.0 < 16.107.26030819; 16.0.0.0 < 16.0.10417.20102 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26108 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5543.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.107.26030819; 16.0.0 < 16.107.26030819; 16.0.0.0 < 16.0.10417.20102 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26107 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5543.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.107.26030819; 16.0.0 < 16.107.26030819; 16.0.0.0 < 16.0.10417.20102 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26113 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < 16.0.5543.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.107.26030819; 16.0.0 < 16.107.26030819 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-26112 10 Mar 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5543.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.107.26030819; 16.0.0 < 16.107.26030819; 16.0.0.0 < 16.0.10417.20102 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-21261 10 Feb 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5539.1002; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.106.26020821; 16.0.0 < 16.106.26020821; 16.0.0.0 < 16.0.10417.20097 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-21511 10 Feb 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.106.26020821; 16.0.0 < 16.106.26020821; 16.0.0 < 16.0.5539.1002; 16.0.0 < 16.0.10417.20097 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-21260 10 Feb 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5539.1002; 16.0.0 < 16.0.5539.1002; 16.0.0 < 16.0.10417.20097; 16.0.0 < 16.0.19127.20518 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-21258 10 Feb 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5539.1002; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.106.26020821; 16.0.0 < 16.106.26020821; 16.0.0.0 < 16.0.10417.20097 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-21259 10 Feb 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5539.1002; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.10417.20097 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20957 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5535.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018; 16.0.0.0 < 16.0.10417.20083 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20952 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < 16.0.5535.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20950 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0.0 < 16.0.5535.1000; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018; 16.0.0.0 < 16.0.10417.20083 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20949 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20948 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018; 16.0.0 < 16.0.5535.1001; 16.0.0 < 16.0.10417.20083 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20956 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-20955 13 Jan 2026 16.0.1 < https://aka.ms/OfficeSecurityReleases; 19.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.0 < https://aka.ms/OfficeSecurityReleases; 16.0.1 < 16.105.26011018; 16.0.0 < 16.105.26011018; 16.0.0.0 < 16.0.10417.20083 No fixed version is explicitly recorded in the structured CVE data. Use CVE record

How this record is maintained

The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.