CVE-2025-64666 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2025-64666 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

EUVD-2025-202235

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network...

CVE-2025-64667 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2025-64667 Microsoft Exchange Server Spoofing Vulnerability

...

EUVD-2025-202237

User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-64667

CVE-2025-64667 is a Microsoft Exchange Server Spoofing Vulnerability caused by UI misrepresentation of critical information that could allow an unauthenticated attacker to spoof over the network. The issue is addressed by December 9, 2025 security updates on Exchange Server products (KB5071873 fo...

CVE-2025-62564 Microsoft Excel Remote Code Execution Vulnerability

...

EUVD-2025-202242

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-62564 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2025-62564

CVE-2025-62564 affects Microsoft Excel within Office. The vulnerability is an out-of-bounds read in Excel that enables a local attacker to execute arbitrary code. CVSSv3.1 reflects a local attack with high impact (C/H/I/A = High) and no privileges required, with user interaction required. Microso...

CVE-2025-62563 Microsoft Excel Remote Code Execution Vulnerability

...

EUVD-2025-202244

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...

CVE-2025-62563 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability

...

EUVD-2025-202243

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-62562

CVE-2025-62562 is a Microsoft Outlook remote code execution vulnerability identified in Office Outlook. The connected sources describe it as a use-after-free in Outlook, enabling an attacker to execute arbitrary code locally. Affected product: Microsoft Outlook (part of Microsoft Office). Underly...

CVE-2025-62563

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability

...

CVE-2025-62563

CVE-2025-62563 is a Use-After-Free vulnerability in Microsoft Excel that allows local code execution. The issue affects Microsoft Excel/Office components and is described in multiple feeds (CVE entry, EUVD/NCSC/CIRCL sightings, and vendor advisories). The core flaw is use-after-free in Excel, ena...