The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, and the text editor Microsoft Word relates to a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, and the text editor Microsoft Word is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17472)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which is caused due to improper boundary checking. An attacker could exploit the vulnerability to execute arbitrary code on the system...

Security Updates for Microsoft Word Products (June 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-32717, CVE-2025-47168,...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17475)

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17476)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17474)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17473)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Word 2016 Multiple RCE Vulnerabilities (KB5002710)

This host is missing an important security update according to Microsoft KB5002710 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2025-32717

CVE-2025-32717 is a heap-based buffer overflow in Microsoft Word that allows a local attacker to execute code. Connected sources corroborate Word/Office context and indicate the flaw affects Word components and can lead to arbitrary code execution on vulnerable systems. The vulnerability is descr...

CVE-2025-32717 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-32717 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-47957

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47170

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47169

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2025-47170

CVE-2025-47170 : Microsoft Word (Office) contains a use-after-free vulnerability in Word that allows an attacker to achieve local code execution. The CVSSv3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates a local, high-impact issue requiring user interaction and with total impact on conf...

CVE-2025-47170 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-47170 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-47168 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2025-47168

CVE-2025-47168 (Microsoft Word RCE) is a use-after-free vulnerability in Word that allows an attacker to execute code locally after triggering with a crafted file or object. The issue is in Word component handling, leading to arbitrary code execution with the attacker’s privileges; the CVSS detai...

CVE-2025-47169

CVE-2025-47169 affects Microsoft Word (Office) via a heap-based buffer overflow in Word, enabling local code execution. The vulnerability is confirmed by multiple sources (MSRC and related advisories) and is addressed by June 2025 Word security updates (e.g., KB5002729/KB5002732). Remediation: in...