CVE-2025-53732

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53737

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2025-53730

Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally...

CVE-2025-53731

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-53722

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network...

CVE-2025-50169

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an unauthorized attacker to execute code over a network...

CVE-2025-50158

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-49755

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49736

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25007

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25007

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49736

The CVE-2025-49736 entry concerns Microsoft Edge (Chromium-based) for Android where the UI can perform an incorrect action, enabling spoofing of the user interface over a network. The available data confirms the affected product family (Edge for Android) and the general impact (spoofing via UI ma...

CVE-2025-49755

Microsoft Edge for Android is affected by CVE-2025-49755, a UI misrepresentation spoofing vulnerability in which an attacker could exploit network access to deceive users. The associated data identifies the affected product as Edge (Chromium-based) on Android and cites a CVSSv3.1 base score of 4....

CVE-2025-53784

CVE-2025-53784: Affected software is Microsoft Word (Office Word). The vulnerability is a use-after-free in Word that allows a local attacker to execute code on the affected system. The CVE is tracked with a high severity (CVSS v3.1: 8.4, LOCAL, NONE user interaction) and has associated Microsoft...

CVE-2025-53783

CVE-2025-53783 is a heap-based buffer overflow in Microsoft Teams that enables remote code execution over a network. Public documents consistently identify the affected component as Microsoft Teams (notably the desktop client) and describe the underlying flaw as a heap-based overflow that allows ...

CVE-2025-53739

Microsoft Excel remote code execution via a type confusion error (CVE-2025-53739) affects Office Excel engines when handling specially crafted files. The issue is described as an incompatible type resource access leading to local code execution. Publicly documented impact states attacker-controll...

CVE-2025-53740

CVE-2025-53740 is a Microsoft Office remote code execution vulnerability due to a use-after-free condition that allows local code execution. Connected sources confirm Office components are affected (Word/Excel/Office suite) and note a security update was released (KB5002756) for Office 2016 as pa...

CVE-2025-53738

CVE-2025-53738 is a Microsoft Word remote code execution vulnerability caused by a use-after-free in Word. Exploitation leads to local code execution on affected Word/Office installations. The issue is documented with a CVSS v3.1 score of 7.8 ( HIGH ) , and multiple connected advisories confirm W...

CVE-2025-53736

CVE-2025-53736 is a Microsoft Word information-disclosure vulnerability caused by a buffer over-read in Word. Exploitation could allow a local attacker to disclose data from memory. Connected sources confirm Word-specific impact and the existence of product updates addressing this CVE (e.g., KB50...