1779 matches found
CVE-2025-54902
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-54902
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-54898
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-53805
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Office Remote Code Execution Vulnerability
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Word Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
PT-2025-36865
Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A free of memory issue not on the heap in Microsoft Office Excel may allow an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to...
PT-2025-36875
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A heap-based buffer overflow exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability may allow remote attackers to...
PT-2025-36845
Name of the Vulnerable Software and Affected Versions: Windows Management Services affected versions not specified Description: A use-after-free issue exists in Windows Management Services that could allow an attacker to gain elevated privileges locally. This vulnerability enables attackers to...
PT-2025-36864
Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: An out-of-bounds read issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to...
PT-2025-36870
Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A use-after-free issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute...
PT-2025-36872
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A free of memory issue not on the heap in Microsoft Office may allow an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to execute arbitrar...
PT-2025-36332
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network. Recommendations: At the moment,...
CVE-2025-55231
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an unauthorized attacker to execute code over a network...
CVE-2025-55229
Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-55229
CVE-2025-55229 concerns improper verification of cryptographic signatures in Windows Certificates, enabling a network attacker to spoof over the network. The primary root cause is flawed verification during certificate handling, with the CVSS data indicating network access, low attack complexity,...
CVE-2025-55231
CVE-2025-55231 describes a race condition in the Windows Storage-based Management Service where concurrent access to a shared resource is improperly synchronized, enabling a network-based attacker to potentially execute code. Affected component: Windows Storage-based Management Service (Windows S...
CVE-2025-53795
CVE-2025-53795 : Microsoft PC Manager has an improper authorization weakness that could let an unauthenticated attacker elevate privileges over the network. The CVE is documented across multiple feeds (NVD, Microsoft MSRC, Red Hat, CNNVD, PT- Security) with high-severity ratings (CVSS v3.1 base s...