CVE-2025-53737: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-32839

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: A use after free issue exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

CVE-2025-53738: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

PT-2025-32843

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specifi...

CVE-2025-53759: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53784: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

PT-2025-32760 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally. The vulnerability allows remote attacke...

CVE-2025-53773: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally...

CVE-2025-53740: Use After Free

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53734: Use After Free

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

PT-2025-32847

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: The software contains a use of uninitialized resource issue. This allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-32838

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: An incorrect conversion between numeric types in Microsoft Office Word can allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-32836

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A use-after-free vulnerability exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability can be triggered by opening a...

PT-2025-32835 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: A use-after-free issue exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

CVE-2025-53730: Use After Free

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

PT-2025-32846

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to execute arbitrary...

PT-2025-32858

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use-after-free condition exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. This can occur when opening a specially crafte...

PT-2025-32797

Name of the Vulnerable Software and Affected Versions: Graphics Kernel affected versions not specified Description: An issue exists in the Graphics Kernel where access of a resource using an incompatible type 'type confusion' can allow an authorized attacker to execute code locally...

CVE-2025-48807: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

Security Updates for Microsoft Office Products (August 2025) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-12-2025 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2025-53738, CVE-2025-53784 - Use after...