CVE-2025-27747

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-29822

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-29792

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2025-27751

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-29791

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27744

Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2025-27750

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-27749

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-29820

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-26642

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27752

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-27748

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-29816

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

CVE-2025-26687

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-27745

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-27746

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.