Vulnerabilities fixed in Microsoft Office

🗓️ 10 Jun 2025 18:45:25Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 6 Views

Microsoft Office vulnerabilities fixed; attackers could gain privileges or run code via malicious files or links.

Reporter	Title	Published	Views	Family All 292
GithubExploit	Exploit for Use After Free in Microsoft	2 Jul 202512:17	–	githubexploit
GithubExploit	Exploit for Path Traversal in Microsoft	18 Jul 202516:13	–	githubexploit
Information Security Automation	June Microsoft Patch Tuesday	10 Jun 202521:49	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client arises from insufficient validation of input data, allowing an attacker to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to data type mixing errors, allows attackers to execute arbitrary code.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in the incorrect limitation of file names and other resources, allowing attackers to execute arbitrary code.	12 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.	13 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.	20 Jun 202500:00	–	bdu_fstec

10 Jun 2025 18:45Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.8

EPSS0.12331

SSVC

office vulnerabilities privilege escalation arbitrary code execution malicious file phishing link office update tool sharepoint vulnerability outlook vulnerability word vulnerability powerpoint vulnerability