EUVD-2025-34278

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...

EUVD-2025-34279

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

EUVD-2025-34377

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34380

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch via the parseCommonName method . An attacker can gain unauthorized access or impersonate users by crafting malicious X.509 certificates that bypass hostname validation through...

EUVD-2025-34381

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34287

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2025-34386

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2025-34396

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to deny service locally...

EUVD-2025-34280

Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally...

EUVD-2025-34283

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34286

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2025-34284

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34293

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

EUVD-2025-34285

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-34281

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2025-34295

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

EUVD-2025-34302

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

EUVD-2025-34407

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

GHSA-987X-96FQ-9384 Duplicate Advisory: Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwq6-fmvp-qp68. This link is maintained to preserve external references. Original Description Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose...