Security Updates for Microsoft Visio Products C2R (February 2025)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21345, CVE-2025-21356 Note that Nessus has not tested for these issues but has instead relied...

Security Updates for Microsoft Visio Products C2R (January 2025)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21345, CVE-2025-21356 Note that Nessus has not tested for these issues but has instead relied...

CVE-2025-21345 Microsoft Office Visio Remote Code Execution Vulnerability

...

CVE-2025-21345

Microsoft Office Visio contains a remote code execution vulnerability (CVE-2025-21345) tied to a Use-After-Free style issue in Visio components. The CVE affects Microsoft Visio when a user opens a specially crafted Visio file, potentially allowing an attacker to execute arbitrary code on the affe...

CVE-2025-21345

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpumplxjy2j 2025-01-15 02:11:36+00:00| seen|...

Security Updates for Microsoft Office Online Server (January 2025)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized commands. CVE-2025-21345, CVE-2025-21354...