CVE-2025-47994

Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

CVE-2025-49703

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-49705

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-49698

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-49699

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49700

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-49702

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-48812

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.