Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Office
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 921 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2025-04-08 | CVE-2025-26642 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Access, Excel, Office, Office_long_term_servicing_channel, Office_online_server, Sharepoint_server | N/A | ||
2025-04-08 | CVE-2025-26642 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Access, Excel, Office, Office_long_term_servicing_channel, Office_online_server, Sharepoint_server | N/A | ||
2025-04-08 | CVE-2025-26687 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. | Office, Windows_10_1507, Windows_10_1607, Windows_10_1809, Windows_10_21h2, Windows_10_22h2, Windows_11_22h2, Windows_11_23h2, Windows_11_24h2, Windows_server_2008, Windows_server_2012, Windows_server_2016, Windows_server_2019, Windows_server_2022, Windows_server_2022_23h2, Windows_server_2025 | N/A | ||
2025-04-08 | CVE-2025-26687 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. | Office, Windows_10_1507, Windows_10_1607, Windows_10_1809, Windows_10_21h2, Windows_10_22h2, Windows_11_22h2, Windows_11_23h2, Windows_11_24h2, Windows_server_2008, Windows_server_2012, Windows_server_2016, Windows_server_2019, Windows_server_2022, Windows_server_2022_23h2, Windows_server_2025 | N/A | ||
2025-04-08 | CVE-2025-27744 | Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally. | Office | 7.8 | ||
2025-04-08 | CVE-2025-27744 | Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally. | Office | 7.8 | ||
2025-04-08 | CVE-2025-27745 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel | N/A | ||
2025-04-08 | CVE-2025-27745 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel | N/A | ||
2025-04-08 | CVE-2025-27746 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Office_online_server, Sharepoint_server | N/A | ||
2025-04-08 | CVE-2025-27746 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Office_online_server, Sharepoint_server | N/A |