10012 matches found
Microsoft Excel 缓冲区错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel, which can be exploited by attackers to obtain sensitive information...
PT-2025-46486
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel, potentially allowing an attacker to disclose information locally. Recommendations At the moment, there is no...
CVE-2025-59240: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2025-60726: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2025-62202: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2025-60727: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2025-46496
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel. This issue could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is ...
CVE-2025-62200: Untrusted Pointer Dereference
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Security Updates for Microsoft Excel Products (Novermber 2025)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Microsoft Excel allows an unauthorized attacker to disclose information locally. CVE-2025-59240, CVE-2025-62200, CVE-2025-62201, CVE-2025-62202, CVE-2025-62203, CVE-2025-60726 ...
Security Updates for Microsoft Office Products (November 2025)
The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - Microsoft Excel allows an unauthorized attacker to disclose information locally. CVE-2025-62202, CVE-2025-60726 - A remote code execution vulnerability. An attacker can exploit...
PT-2025-46495
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference exists in Microsoft Office Excel, potentially allowing a local attacker to execute code. This issue could enable unauthorized code execution...
Security Updates for Microsoft Office Online Server (November 2025)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. CVE-2025-60726 - Out-of-boun...
KLA90060 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability ...
Security Updates for Microsoft Office Products (October 2025) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2025 advisory, including: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2025-59236 - Use after free i...
CVE-2025-12384: Missing Authorization
The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized access/modification/loss of data in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action in the...
OESA-2025-2613 perl-Spreadsheet-ParseExcel security update
The Spreadsheet::ParseExcel module can be used to read information from an Excel 95-2003 file. Security Fixes: Spreadsheet::ParseExcel version 0.65, a Perl module for parsing Excel files, is vulnerable to arbitrary code execution ACE due to passing unvalidated input from a file into a string-type...
WordPress plugin Simple Excel Pricelist for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
OESA-2025-2507 perl-Spreadsheet-ParseExcel security update
The Spreadsheet::ParseExcel module can be used to read information from an Excel 95-2003 file. Security Fixes: Spreadsheet::ParseExcel version 0.65, a Perl module for parsing Excel files, is vulnerable to arbitrary code execution ACE due to passing unvalidated input from a file into a string-type...
CVE-2025-12096 Simple Excel Pricelist for WooCommerce <= 1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
