KLA82406 Multiple vulnerabilities in Microsoft Office

🗓️ 08 Apr 2025 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 112 Views

Multiple vulnerabilities in Microsoft Office allow privilege escalation and arbitrary code execution.

Reporter	Title	Published	Views	Family All 346
ATTACKERKB	CVE-2025-29823	8 Apr 202518:16	–	attackerkb
ATTACKERKB	CVE-2025-29816	8 Apr 202518:16	–	attackerkb
ATTACKERKB	CVE-2025-29822	8 Apr 202518:16	–	attackerkb
ATTACKERKB	CVE-2025-29820	8 Apr 202518:16	–	attackerkb
Information Security Automation	April Microsoft Patch Tuesday	10 Apr 202522:59	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft AutoUpdate (MAU) application for Mac, which deals with access control deficiencies, allows a malicious individual to escalate their privileges.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office and Microsoft 365 Apps for Enterprise software lies in the use of memory after it is released, allowing an attacker to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	9 Apr 202500:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29801
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29794
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27745
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29791
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27750
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27751
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26687
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27748
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27749

14 Apr 2025 00:00Current

9.8Critical risk

Vulners AI Score9.8

CVSS 3.18.8

EPSS0.23627

SSVC

microsoft office vulnerabilities remote code execution privilege escalation security feature bypass