CVE-2025-47167

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47165

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-47164

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47162

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47162

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

firefox: thunderbird: Potential local code execution in “Copy as cURL” command

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, leading to local code execution on the user's system...

Microsoft Outlook Remote Code Execution Vulnerability

'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally...

CVE-2025-4387: Unrestricted Upload of File with Dangerous Type

The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload vulnerability due to missing file type validation in the wcapaddtocartpopupuploadfiles function in all versions up to, and including, 9.16.0. This makes it possible for an authenticated attacker, with...

CVE-2025-47175: Use After Free

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...

CVE-2025-47174: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-24864

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description The issue is related to a use after free flaw in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

CVE-2025-47169: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

PT-2025-24879

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. A "use after free" condition occurs when memor...

CVE-2025-47165: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-24869

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description The issue is related to a use after free condition in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. Recommendations At the moment, there ...

CVE-2025-47957: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47173: Improper Restriction of Names for Files and Other Resources

Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47953: Improper Restriction of Names for Files and Other Resources

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47168: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Important: firefox

Issue Overview: An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability affects Firefox 138.0.4, Firefox ESR 128.10.1, and Firefox ESR 115.23.1. CVE-2025-4918 An attacker was able to perform an out-of-bounds read or write on a JavaScript...