Security Updates for Microsoft Excel Products C2R (August 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instea...

Linux Distros Unpatched Vulnerability : CVE-2023-4581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their...

Malicious code in test-mlw2-excel-cutin (npm)

The package test-mlw2-excel-cutin was found to contain malicious code...

Malicious code in excel-data-exporter (npm)

The package excel-data-exporter was found to contain malicious code...

MAL-2025-35302 Malicious code in test-mlw2-excel-cutin (npm)

The package test-mlw2-excel-cutin was found to contain malicious code...

MAL-2025-20036 Malicious code in excel-data-exporter (npm)

The package excel-data-exporter was found to contain malicious code...

MAL-2025-39873 Malicious code in xlsx-to-json-lh (npm)

The package xlsx-to-json-lh was found to contain malicious code...

CVE-2025-53759

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53741

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53737

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53739

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53735

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Memory Use After Free Code Execution

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Microsoft Office including SharePoint, Visio, Word, Excel and PowerPoint. The vulnerabilities in Microsoft Office include several "use after free" errors, heap-based buffer overflows and other vulnerabilities that allow unauthorized attackers to execute...

Microsoft Excel 2016 Multiple RCE Vulnerabilities (KB5002758)

This host is missing an important security update according to Microsoft KB5002758 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2025-53739

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53759

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53739

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53741

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53759

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...