CVE-2025-53730

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-50176

Access of resource using incompatible type 'type confusion' in Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2025-48807

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-48807

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-48807

CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...

CVE-2025-53784

CVE-2025-53784: Affected software is Microsoft Word (Office Word). The vulnerability is a use-after-free in Word that allows a local attacker to execute code on the affected system. The CVE is tracked with a high severity (CVSS v3.1: 8.4, LOCAL, NONE user interaction) and has associated Microsoft...

CVE-2025-53740

CVE-2025-53740 is a Microsoft Office remote code execution vulnerability due to a use-after-free condition that allows local code execution. Connected sources confirm Office components are affected (Word/Excel/Office suite) and note a security update was released (KB5002756) for Office 2016 as pa...

CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2025-53738

CVE-2025-53738 is a Microsoft Word remote code execution vulnerability caused by a use-after-free in Word. Exploitation leads to local code execution on affected Word/Office installations. The issue is documented with a CVSS v3.1 score of 7.8 ( HIGH ) , and multiple connected advisories confirm W...

CVE-2025-53737

CVE-2025-53737 is a Microsoft Excel remote code execution vulnerability caused by a heap-based buffer overflow when opening specially crafted files. The connected sources (e.g., MSRC/Excel advisories and CNVD) confirm Excel as the affected product and cite heap-based overflow as the root cause le...

CVE-2025-53735

CVE-2025-53735 is a Microsoft Excel remote code execution vulnerability caused by a use-after-free condition in Excel. The issue allows an attacker to run arbitrary code locally when a user opens a specially crafted Excel file. Microsoft has released security updates to address this vulnerability...

CVE-2025-53733

CVE-2025-53733 affects Microsoft Word (Office). The issue is caused by incorrect conversion between numeric types in Word, enabling a local attacker to execute arbitrary code when a specially crafted document is opened or when Preview Pane is used, per vendor descriptions and multiple security pa...

CVE-2025-53734

CVE-2025-53734 is a Microsoft Office Visio remote code execution vulnerability caused by a use-after-free condition. The available sources confirm an issue in Visio that allows an attacker to execute code locally, with the impact described as arbitrary code execution on the affected machine. The ...

CVE-2025-53731

CVE-2025-53731 is a Microsoft Office remote code execution vulnerability described as a use-after-free in Microsoft Office that could allow an attacker to execute arbitrary code locally. Affected products include the Microsoft Office suite (Office on Windows, including Word/Excel/PowerPoint/Share...

CVE-2025-53152

CVE-2025-53152 is a local-use-after-free vulnerability in the Desktop Window Manager (DWM) of Windows that enables an authenticated attacker to execute code locally. The CVSS v3.1 score indicates local access with low privileges and no user interaction, but high impact to confidentiality, integri...

CVE-2025-50176

CVE-2025-50176 is a Windows graphics kernel RCE due to a type confusion in the DirectX/Graphics Kernel. Affected: core graphics components in Windows. Impact: local code execution with high confidentiality/integrity/availability risk (CVSS 3.1, 7.8). Public details in connected docs show Windows ...

CVE-2025-53773

CVE-2025-53773 describes a command-injection-based remote code execution risk in GitHub Copilot and Visual Studio. The root cause is improper neutralization of elements in prompts/config that Copilot can read and act on, potentially allowing an attacker to cause Copilot to modify project configur...