Security Updates for Microsoft Word Products C2R (March 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24078, CVE-2025-24079 Note that...

CVE-2025-24078

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-24078

CVE-2025-24078 is a use-after-free vulnerability in Microsoft Word that can allow a local attacker to execute arbitrary code. The flaw is documented as a Microsoft Word Remote Code Execution issue with a CVSS v3.1 base score of 7.0 (High, Local exploitability, user interaction required). The vuln...

CVE-2025-24078 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-24078

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 18:42:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7207...

Security Updates for Microsoft Word Products (March 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...