CVE-2025-53737

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53737

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53732

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53735

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53730

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-53731

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53731

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53730

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-48807

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-48807

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-48807

CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...

CVE-2025-53784

CVE-2025-53784: Affected software is Microsoft Word (Office Word). The vulnerability is a use-after-free in Word that allows a local attacker to execute code on the affected system. The CVE is tracked with a high severity (CVSS v3.1: 8.4, LOCAL, NONE user interaction) and has associated Microsoft...

CVE-2025-53740

CVE-2025-53740 is a Microsoft Office remote code execution vulnerability due to a use-after-free condition that allows local code execution. Connected sources confirm Office components are affected (Word/Excel/Office suite) and note a security update was released (KB5002756) for Office 2016 as pa...

CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2025-53738

CVE-2025-53738 is a Microsoft Word remote code execution vulnerability caused by a use-after-free in Word. Exploitation leads to local code execution on affected Word/Office installations. The issue is documented with a CVSS v3.1 score of 7.8 ( HIGH ) , and multiple connected advisories confirm W...

CVE-2025-53737

CVE-2025-53737 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow when opening specially crafted files. The connected sources (e.g., MSRC/Excel advisories and CNVD) confirm Excel as the affected product and cite heap-based overflow as the root cause le...