CVE-2025-47175

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...

CVE-2025-47174

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-47173

Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47171

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...

CVE-2025-47170

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47169

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47168

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47167

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47165

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-47164

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47162

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-47162

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

firefox: thunderbird: Potential local code execution in “Copy as cURL” command

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, leading to local code execution on the user's system...

Microsoft Outlook Remote Code Execution Vulnerability

'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally...

Important: firefox

Issue Overview: An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability affects Firefox 138.0.4, Firefox ESR 128.10.1, and Firefox ESR 115.23.1. CVE-2025-4918 An attacker was able to perform an out-of-bounds read or write on a JavaScript...

CVE-2025-47165: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-47174: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-24869

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description The issue is related to a use after free condition in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. Recommendations At the moment, there ...

PT-2025-24864

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description The issue is related to a use after free flaw in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

PT-2025-24879

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. A "use after free" condition occurs when memor...