146685 matches found
KLA90822 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Password Manager can be exploited to cause denial of...
Security Updates for Microsoft Access Products C2R (December 2025)
The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62552 Note that Nessus has n...
Microsoft Edge (Chromium) < 143.0.3650.80 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.80. It is, therefore, affected by multiple vulnerabilities as referenced in the December 11, 2025 advisory. - Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote...
Security Updates for Microsoft Excel Products C2R (December 2025)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62553, CVE-2025-62556...
Security Updates for Microsoft Office Products C2R (December 2025)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62554, CVE-2025-62557 Note that...
CVE-2025-64667
User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-64670
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network...
CVE-2025-62563
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62557
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-62558
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62562
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
CVE-2025-62552
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally...
CVE-2025-62554
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-62556
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62553
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62469
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2025-62564
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62559
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...