146695 matches found
CVE-2025-59235
CVE-2025-59235 is an information-disclosure vulnerability in Microsoft Excel (Office) caused by an out-of-bounds read. Public sources in the connected docs consistently identify the affected component as Excel within the Microsoft Office suite and link the issue to Excel information-disclosure mi...
CVE-2025-59234 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2025-59234 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2025-59233 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-59233
CVE-2025-59233 is a Microsoft Excel remote code execution vulnerability caused by a resource access/type confusion issue in Excel/Office. The issue allows an attacker with local access to cause code execution on the vulnerable system, with the CVSS v3.1 base score 7.8 (HIGH): Local attack vector,...
CVE-2025-59233 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-59231 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-59231 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-59228
CVE-2025-59228 corresponds to a Microsoft SharePoint remote code execution vulnerability caused by improper input validation. Affected component is SharePoint within Office ecosystem; exploitation allows an authorized attacker to execute arbitrary code over a network with low privileges and no us...
CVE-2025-59228 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-59231
CVE-2025-59231 is a Microsoft Excel vulnerability described as a type-confusion in Excel that could allow an attacker with local access to execute code on the affected system. The associated Nessus findings and Microsoft advisories indicate multiple October 2025 office updates address this and re...
CVE-2025-59195 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2025-59195 Windows Graphics Component Denial of Service Vulnerability
...
CVE-2025-59195
CVE-2025-59195 describes a race condition in the Microsoft Graphics Component caused by concurrent execution on a shared resource, enabling an authorized attacker to cause a local Denial of Service. The connected documents confirm the vulnerability in the Graphics Component and note that updates ...
CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-58722 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2025-53782 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2025-53782
CVE-2025-53782 refers to an elevation-of-privilege vulnerability in Microsoft Exchange Server caused by an incorrect implementation of the authentication algorithm, enabling an unauthorized, local attacker to escalate privileges. Across connected sources, the vulnerability is associated with mult...