Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Office
Total 946 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-53736 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2025-08-18 N/A 6.8 MEDIUM
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53733 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2025-08-18 N/A 8.4 HIGH
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53738 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-18 N/A 7.8 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53759 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-15 N/A 7.8 HIGH
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53741 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53740 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-15 N/A 8.4 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53739 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-15 N/A 7.8 HIGH
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53737 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53735 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-15 N/A 7.8 HIGH
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53734 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-15 N/A 7.8 HIGH
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-53732 1 Microsoft 1 Office 2025-08-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53731 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-15 N/A 8.4 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53730 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-15 N/A 7.8 HIGH
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-53761 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-15 N/A 7.8 HIGH
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-53766 1 Microsoft 16 Office, Windows 10 1507, Windows 10 1607 and 13 more 2025-08-14 N/A 9.8 CRITICAL
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2007-0671 1 Microsoft 14 Access, Excel, Excel Viewer and 11 more 2025-08-13 9.3 HIGH 8.8 HIGH
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVE-2025-49705 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-07-16 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-49703 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2025-07-16 N/A 7.8 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49702 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-07-16 N/A 7.8 HIGH
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49700 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-07-15 N/A 7.8 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.