CVE-2025-53737

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53731

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53730

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-53730

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-53731

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-48807

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-48807

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-48807

CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...

CVE-2025-53784

CVE-2025-53784: Affected software is Microsoft Word (Office Word). The vulnerability is a use-after-free in Word that allows a local attacker to execute code on the affected system. The CVE is tracked with a high severity (CVSS v3.1: 8.4, LOCAL, NONE user interaction) and has associated Microsoft...

CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2025-53740

CVE-2025-53740 is a Microsoft Office remote code execution vulnerability due to a use-after-free condition that allows local code execution. Connected sources confirm Office components are affected (Word/Excel/Office suite) and note a security update was released (KB5002756) for Office 2016 as pa...

CVE-2025-53738

CVE-2025-53738 is a Microsoft Word remote code execution vulnerability caused by a use-after-free in Word. Exploitation leads to local code execution on affected Word/Office installations. The issue is documented with a CVSS v3.1 score of 7.8 ( HIGH ) , and multiple connected advisories confirm W...

CVE-2025-53737

CVE-2025-53737 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow when opening specially crafted files. The connected sources (e.g., MSRC/Excel advisories and CNVD) confirm Excel as the affected product and cite heap-based overflow as the root cause le...

CVE-2025-53735

CVE-2025-53735 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free condition in Excel. The issue allows an attacker to run arbitrary code locally when a user opens a specially crafted Excel file. Microsoft has released security updates to address this vulnerability...

CVE-2025-53734

CVE-2025-53734 is a Microsoft Office Visio remote code execution vulnerability caused by a use-after-free condition. The available sources confirm an issue in Visio that allows an attacker to execute code locally, with the impact described as arbitrary code execution on the affected machine. The ...

CVE-2025-53733

CVE-2025-53733 affects Microsoft Word (Office). The issue is caused by incorrect conversion between numeric types in Word, enabling a local attacker to execute arbitrary code when a specially crafted document is opened or when Preview Pane is used, per vendor descriptions and multiple security pa...