Documented CVEs
1 vulnerabilities cataloged in the Hermes intelligence repository.
Microsoft Office & 365 Apps — Security Intelligence & Vulnerability Profile
1. Software Identity & Security Posture
Section titled “1. Software Identity & Security Posture”| Parameter | Technical Specification |
|---|---|
| Official Name | Microsoft Office & 365 Apps |
| Vendor / Project | microsoft |
| Canonical ID | microsoft:office |
| Versioning Scheme | generic |
| CPE Identifiers | cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*cpe:2.3:a:microsoft:365_apps:*:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:* |
| Overall Posture | CRITICAL |
| Recommended Safe Release | 16.0.18526.20520 |
CISA KEV Entries
0 flaws with confirmed active in-the-wild exploitation.
Weaponized Exploits
1 vulnerabilities with publicly available PoCs or weaponized exploit tooling.
Remediation Target
Recommended upgrade to 16.0.18526.20520 to neutralize known flaws.
2. 30-Day Risk Trajectory & Trend Evolution
Section titled “2. 30-Day Risk Trajectory & Trend Evolution”Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:
Current HTS Score
0 / 100
= Stable over 30d
Max EPSS (Exploitation)
0.9 %
▲ +0.9 % over 30d
CISA KEV Activity
0
No active KEV
HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10
3. Vulnerability History & Version Applicability Matrix
Section titled “3. Vulnerability History & Version Applicability Matrix”| CVE | CVSS Score | EPSS Probability | CISA KEV | Affected Versions | Fixed In | Hermes Analysis |
|---|---|---|---|---|---|---|
| CVE-2026-78510 | 9.8 (CRITICAL) | 1.0% | No | < v16.0.18526.20520 | 16.0.18526.20520 | Analysis → |
4. Evaluate Running Versions in Interactive Workbench
Section titled “4. Evaluate Running Versions in Interactive Workbench”Are you operating Microsoft Office & 365 Apps in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:
Launch Software Intelligence Workbench for Microsoft Office & 365 Apps Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.