CVE-2025-54896: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-36866

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A heap-based buffer overflow exists in Microsoft Office Excel. This issue allows a remote attacker to execute arbitrary code on the affected system. Recommendations: At the...

PT-2025-36868

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: An out-of-bounds read issue exists in Microsoft Office Excel. This allows a remote attacker to execute arbitrary code, potentially affecting the system. Recommendations: At t...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to obtain sensitive information...

PT-2025-36867

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A buffer over-read in Microsoft Office Excel can allow an unauthorized attacker to disclose information locally. This issue enables attackers to obtain sensitive information...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2025-36870

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A use-after-free issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2025-36869

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A use-after-free issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2025-36864

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: An out-of-bounds read issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to...

Security Updates for Microsoft Excel Products (September 2025)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-54896, CVE-2025-54898,...

PT-2025-36862

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A use after free issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. Microsoft Excel Code Execution Vulnerability, the vulnerability is caused due to failure to free memory on the heap. An attacker can exploit this vulnerability to execute arbitrary code on the system...

PT-2025-36865

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A free of memory issue not on the heap in Microsoft Office Excel may allow an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to...

Microsoft Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to incorrect boundary checking. An attacker can exploit the vulnerability to overflow a buffer and execute arbitrary code on t...

CVE-2025-54904: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-58745

WeGIA is a Web manager for charitable institutions. The fix for CVE-2025-22133 was not enough to remediate the arbitrary file upload vulnerability. The WeGIA only check MIME types for Excel files at endpoint /html/socio/sistema/controller/controlaxlsx.php, which can be bypassed by using magic byt...