5931 matches found
CVE-2025-24079
CVE-2025-24079 is a use-after-free vulnerability in Microsoft Word (Office) that allows a local attacker to execute code on a vulnerable system. The issue affects Word components and is triggered by a crafted input/application behavior, with CVSS 3.1 scoring a base 7.8 (High) and an attack vector...
CVE-2025-24078 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-24077 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-24078 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-24077 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-24078
CVE-2025-24078 is a use-after-free vulnerability in Microsoft Word that can allow a local attacker to execute arbitrary code. The flaw is documented as a Microsoft Word Remote Code Execution issue with a CVSS v3.1 base score of 7.0 (High, Local exploitability, user interaction required). The vuln...
CVE-2025-24077
CVE-2025-24077 is a Microsoft Word use-after-free vulnerability that enables a local attacker to execute code on affected systems. The weakness resides in Word/Office components and, per the sources, can lead to arbitrary code execution with high impact (CVE-2025-24077). Affected products include...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
End of support for Office 2016 and Office 2019
None None...
PT-2025-10820
Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: The issue is related to a use after free condition in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. Recommendations: At the moment, the...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
PT-2025-10821
Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to 2.3 Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified Description Th...
PT-2025-10822
Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to 2025-24079 Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Microsoft Office long term servicing channel affected versions not specified...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft Office 资源管理错误漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
Microsoft Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Security Updates for Microsoft Word Products (March 2025)
The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...
Linux Distros Unpatched Vulnerability : CVE-2010-3453
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle an unspecified number of list leve...