5932 matches found
CVE-2025-65814
RHOPHI Analytics LLP Office App-Edit Word v6.4.1 is affected by a directory traversal vulnerability due to missing security checks in the file import process. The issue is documented across multiple sources (including Red Hat and NVD) with the root cause described as insufficient validation durin...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and potentially gain access to sensitive data. Successful exploitation requires the malicious...
CVE-2025-62558
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62559
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62558
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62559
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62555
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62555
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62559 Microsoft Word Remote Code Execution Vulnerability
...
EUVD-2025-202213
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62558 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-62558 Microsoft Word Remote Code Execution Vulnerability
...
EUVD-2025-202214
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62558
CVE-2025-62558 is a Use-after-Free remote code execution vulnerability in Microsoft Word (Office) that allows a local attacker to execute arbitrary code after user interaction. The issue is itemized in multiple providers and is addressed by Microsoft with December 2025 Word updates (e.g., KB50028...
CVE-2025-62559 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-62559
CVE-2025-62559 is a Microsoft Word remote code execution vulnerability described as a use‑after‑free in Word that enables local code execution. Exploitation is local with user interaction required (CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected advisories note Word Word/Office componen...
CVE-2025-62555 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-62555 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-62555
CVE-2025-62555 is a Use-after-free vulnerability in Microsoft Word (Office) that can lead to local code execution. The connected documents indicate Word-related RCE issues tracked in December 2025 updates, with affected products including Word for Mac and Word 2016; updates exist to fix these CVE...