Vulnerabilities fixed in Microsoft Office

🗓️ 14 Oct 2025 18:38:05Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 7 Views

Office vulnerabilities fixed could allow denial of service or arbitrary code execution via rogue files.

Reporter	Title	Published	Views	Family All 274
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to data type mixing errors, allowing an attacker to execute arbitrary code.	16 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.	16 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.	16 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	17 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	17 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise packages, related to an error in handling exceptional states, allows a perpetrator to trigger a service failure.	17 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.	17 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server lies in insufficient input data validation, allowing an attacker to execute arbitrary code.	17 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.	17 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visio graphical editors in Microsoft Office and Microsoft 365 Apps for Enterprise packages allows a perpetrator to execute arbitrary code.	17 Oct 202500:00	–	bdu_fstec

14 Oct 2025 18:38Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8 - 8.8

EPSS0.02245

SSVC

office vulnerabilities denial of service arbitrary code execution rogue files