CVE-2025-53761

Summary (based on provided documents): CVE-2025-53761 is a use-after-free vulnerability in Microsoft Office PowerPoint that can allow an attacker with local access to execute code locally. The vulnerability is associated with PowerPoint and is addressed by the August 2025 security update (KB50027...

CVE-2025-53759

CVE-2025-53759 is a Microsoft Excel remote code execution vulnerability described as caused by the use of an uninitialized resource in Excel. The issue enables a local attacker to run arbitrary code when a specially crafted file is opened, with a CVSSv3.1 base score of 7.8 (High) and impact on co...

CVE-2025-53730

CVE-2025-53730 is a Use-After-Free vulnerability in Microsoft Office Visio that allows local code execution when exploited via crafted input. The core issue is a use-after-free in Visio components leading to arbitrary code execution on the affected system. Multiple connected sources corroborate t...

Microsoft Word Remote Code Execution Vulnerability

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office Visio Remote Code Execution Vulnerability

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

Windows Hyper-V Remote Code Execution Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-8767 AnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injection

The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'downloadcsvplayers' and 'downloadcsvgames' functions. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed...

PT-2025-32760 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally. The vulnerability allows remote attacke...

PT-2025-32836 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A use-after-free vulnerability exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability can be triggered by opening a...

PT-2025-32835 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: A use-after-free issue exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

Security Updates for Microsoft Office Products (August 2025) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-12-2025 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2025-53738, CVE-2025-53784 - Use after...

PT-2025-32846 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to execute arbitrary...

PT-2025-32840

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A use-after-free vulnerability exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to...