Filtered by vendor Microsoft Subscriptions
Filtered by product 365 Subscriptions
Total 61 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-59286 1 Microsoft 4 365, 365 Copilot, 365 Copilot Business Chat and 1 more 2025-11-22 9.3 Critical
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-59272 1 Microsoft 4 365, 365 Copilot, 365 Copilot Business Chat and 1 more 2025-11-22 9.3 Critical
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-59252 1 Microsoft 3 365, 365 Copilot, 365 Word Copilot 2025-11-22 9.3 Critical
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-59238 1 Microsoft 10 365, 365 Apps, Office and 7 more 2025-11-22 7.8 High
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-59232 1 Microsoft 19 365, 365 Apps, Access and 16 more 2025-11-22 7.1 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59229 1 Microsoft 5 365, 365 Apps, Office and 2 more 2025-11-22 5.5 Medium
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
CVE-2025-59227 1 Microsoft 12 365, 365 Apps, Office and 9 more 2025-11-22 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59226 1 Microsoft 6 365, 365 Apps, Office 2021 and 3 more 2025-11-22 7.8 High
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2025-59225 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2025-11-22 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59224 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2025-11-22 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59223 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2025-11-22 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59222 1 Microsoft 15 365, 365 Apps, Office and 12 more 2025-11-22 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59221 1 Microsoft 15 365, 365 Apps, Office and 12 more 2025-11-22 7 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-59243 1 Microsoft 7 365, 365 Apps, Excel and 4 more 2025-11-22 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59235 1 Microsoft 19 365, 365 Apps, Access and 16 more 2025-11-22 7.1 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59234 1 Microsoft 10 365, 365 Apps, Office and 7 more 2025-11-22 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59233 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2025-11-22 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-59231 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2025-11-22 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62211 1 Microsoft 2 365, Dynamics 365 2025-11-21 8.7 High
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network.
CVE-2025-62205 1 Microsoft 7 365, 365 Apps, Office 2021 and 4 more 2025-11-21 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.