Vulnerabilities fixed in Microsoft Office

🗓️ 13 May 2025 18:58:56Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Microsoft Office fixes flaws that could allow privilege escalation and code execution via rogue files or links.

Reporter	Title	Published	Views	Family All 298
Information Security Automation	May Microsoft Patch Tuesday	14 May 202500:58	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	14 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	14 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook client for Microsoft Office programs and 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Graphics component of Windows operating systems, which allows a hacker to execute arbitrary code	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.	15 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.	15 May 202500:00	–	bdu_fstec

13 May 2025 18:58Current

9.8High risk

Vulners AI Score9.8

CVSS 3.17.8 - 8.4

EPSS0.01672

SSVC

Microsoft Office PowerPoint vulnerability Outlook vulnerability SharePoint vulnerability Excel vulnerability Privilege escalation Code execution Rogue file link