KLA83573 Multiple vulnerabilities in Microsoft Office

🗓️ 13 May 2025 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 36 Views

Multiple vulnerabilities in Microsoft Office allow code execution and privilege escalation risks.

Reporter	Title	Published	Views	Family All 298
Information Security Automation	May Microsoft Patch Tuesday	14 May 202500:58	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	14 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	14 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook client for Microsoft Office programs and 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Graphics component of Windows operating systems, which allows a hacker to execute arbitrary code	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.	15 May 202500:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30393
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29978
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30375
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30386
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30378
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30379
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30382
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32704
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29977
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29976

19 May 2025 00:00Current

10High risk

Vulners AI Score10

CVSS 3.17.8 - 8.4

EPSS0.03365

SSVC

microsoft office vulnerabilities remote code execution privilege escalation microsoft excel microsoft powerpoint microsoft sharepoint server microsoft outlook windows graphics component.