Filtered by vendor Microsoft Subscriptions
Filtered by product Office Subscriptions
Total 952 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-53759 1 Microsoft 11 365, 365 Apps, Excel and 8 more 2025-08-28 7.8 High
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53741 1 Microsoft 13 365, 365 Apps, Excel and 10 more 2025-08-28 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53730 1 Microsoft 8 365, 365 Apps, Office and 5 more 2025-08-28 7.8 High
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVE-2022-44696 1 Microsoft 2 365 Apps, Office 2025-08-27 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-44691 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-27 7.8 High
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2025-21354 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-25 8.4 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-49705 1 Microsoft 10 365 Apps, Office, Office 2016 and 7 more 2025-08-23 7.8 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-49703 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2025-08-23 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49702 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-23 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49700 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-23 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49699 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2025-08-23 7 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49698 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-23 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49697 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-23 8.4 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49696 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-23 8.4 High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49695 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-08-23 8.4 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49711 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-23 7.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-48812 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-08-23 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-47994 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-08-23 7.8 High
Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
CVE-2007-0671 1 Microsoft 14 Access, Excel, Excel Viewer and 11 more 2025-08-13 8.8 High
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVE-2006-2492 1 Microsoft 2 Office, Works Suite 2025-07-30 8.8 High
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.