Product:

Office

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 948
Date Id Summary Products Score Patch Annotated
2025-08-12 CVE-2025-53740 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel 8.4
2025-08-12 CVE-2025-53741 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server 7.8
2025-08-12 CVE-2025-53759 Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Office_online_server 7.8
2025-08-12 CVE-2025-53761 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Powerpoint 7.8
2025-08-12 CVE-2025-53766 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. Office, Windows_10_1507, Windows_10_1607, Windows_10_1809, Windows_10_21h2, Windows_10_22h2, Windows_11_22h2, Windows_11_23h2, Windows_11_24h2, Windows_server_2008, Windows_server_2012, Windows_server_2016, Windows_server_2019, Windows_server_2022, Windows_server_2022_23h2, Windows_server_2025 9.8
2025-07-08 CVE-2025-49702 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel N/A
2025-07-08 CVE-2025-49703 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_server, Word N/A
2025-07-08 CVE-2025-49705 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 365_apps, Office, Office_long_term_servicing_channel, Powerpoint N/A
2025-07-08 CVE-2025-47994 Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally. 365_apps, Office, Office_long_term_servicing_channel, Sharepoint_enterprise_server 8.6
2025-07-08 CVE-2025-48812 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365_apps, Excel, Office, Office_long_term_servicing_channel, Office_online_server 5.5