5932 matches found
MAL-2025-28638 Malicious code in p5-bbox-aligned-word (npm)
The package p5-bbox-aligned-word was found to contain malicious code...
MAL-2025-17984 Malicious code in dasnoo-random-word (npm)
The package dasnoo-random-word was found to contain malicious code...
Malicious code in dasnoo-random-word (npm)
The package dasnoo-random-word was found to contain malicious code...
docusign-jsx (1.0.0), word-replace-contabil (>=1.0.1, <=1.0.9) potentially affected by unknown CVE via word2pdf (0.0.1-security)
word2pdf NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on word2pdf and may be impacted: - docusign-jsx 1.0.0 - word-replace-contabil =1.0.1, =1.0.9 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39417...
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53784
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Microsoft Office including SharePoint, Visio, Word, Excel and PowerPoint. The vulnerabilities in Microsoft Office include several "use after free" errors, heap-based buffer overflows and other vulnerabilities that allow unauthorized attackers to execute...
Microsoft Word 2016 Multiple Vulnerabilities (KB5002763)
This host is missing an important security update according to Microsoft KB5002763 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2025-53784
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53784
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2025-53784
CVE-2025-53784: Affected software is Microsoft Word (Office Word). The vulnerability is a use-after-free in Word that allows a local attacker to execute code on the affected system. The CVE is tracked with a high severity (CVSS v3.1: 8.4, LOCAL, NONE user interaction) and has associated Microsoft...
