Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Office
(Microsoft)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 930 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2025-07-08 | CVE-2025-47994 | Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally. | 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server | 8.6 | ||
2025-07-08 | CVE-2025-48812 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server | 5.5 | ||
2025-07-08 | CVE-2025-49695 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel | 8.4 | ||
2025-07-08 | CVE-2025-49696 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel | 8.4 | ||
2025-07-08 | CVE-2025-49697 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Office_online_server | 8.4 | ||
2025-07-08 | CVE-2025-49698 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Word | 7.8 | ||
2025-07-08 | CVE-2025-49699 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Outlook, Powerpoint, Word | 7.0 | ||
2025-07-08 | CVE-2025-49700 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 365_apps, Office, Office_long_term_servicing_channel, Word | N/A | ||
2025-07-08 | CVE-2025-49711 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server | 7.8 |