2911 matches found
CVE-2025-54905 Microsoft Word Information Disclosure Vulnerability
...
Microsoft Word Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
PT-2025-36871
Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: An untrusted pointer dereference exists in Microsoft Office Word, potentially allowing an unauthorized attacker to disclose information locally. The vulnerability enables...
Security Updates for Microsoft Word Products (September 2025)
The Microsoft Word Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...
Microsoft Word Information Disclosure Vulnerability (CNVD-2025-18825)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which is caused due to a buffer over-read error. An attacker could exploit the vulnerability to obtain sensitive information...
Security Updates for Microsoft Word Products C2R (August 2025)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instead...
Microsoft Word Code Execution Vulnerability (CNVD-2025-18817)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which is caused due to a post-release usage error when opening a specially crafted file. An attacker could exploit this vulnerability ...
Microsoft Word Code Execution Vulnerability (CNVD-2025-18826)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. Microsoft Word Code Execution Vulnerability, the vulnerability is caused due to incorrect conversion between number types. An attacker could exploit this vulnerability to execute arbitrary co...
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53784
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2025-53784
CVE-2025-53784: Affected software is Microsoft Word (Office Word). The vulnerability is a use-after-free in Word that allows a local attacker to execute code on the affected system. The CVE is tracked with a high severity (CVSS v3.1: 8.4, LOCAL, NONE user interaction) and has associated Microsoft...
