cve.bz

microsoft 365 apps vulnerabilities in 2025, newest first, page 2

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 7.8CVE-2025-54899EPSS 0.6%

    Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  2. 7.8CVE-2025-54898EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  3. 7.8CVE-2025-54896EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  4. 8.4CVE-2025-53784EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  5. 7.8CVE-2025-53761EPSS 0.6%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  6. 7.8CVE-2025-53759EPSS 0.6%

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  7. 7.8CVE-2025-53741EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  8. 8.4CVE-2025-53740EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  9. 7.8CVE-2025-53739EPSS 0.6%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  10. 7.8CVE-2025-53738EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  11. 7.8CVE-2025-53737EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  12. 6.2CVE-2025-53736EPSS 0.5%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  13. 7.8CVE-2025-53735EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  14. 7.8CVE-2025-53734EPSS 0.5%

    Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  15. 8.4CVE-2025-53733EPSS 0.6%

    Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  16. 8.4CVE-2025-53731EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  17. 7.8CVE-2025-53730EPSS 0.5%

    Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  18. 3.3CVE-2025-49756EPSS 0.2%

    Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.

  19. 7.8CVE-2025-49711EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. 7.8CVE-2025-49705EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  21. 7.8CVE-2025-49703EPSS 0.8%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  22. 7.8CVE-2025-49702EPSS 0.7%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2025-49700EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  24. 7.0CVE-2025-49699EPSS 0.4%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2025-49698EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  26. 8.4CVE-2025-49697EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  27. 8.4CVE-2025-49696EPSS 0.6%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  28. 8.4CVE-2025-49695EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  29. 5.5CVE-2025-48812EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  30. 8.6CVE-2025-47994EPSS 3.3%

    Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

  31. 8.4CVE-2025-32717EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  32. 8.4CVE-2025-47957ExploitEPSS 1.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  33. 8.4CVE-2025-47953EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  34. 7.8CVE-2025-47176EPSS 0.8%

    '.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.

  35. 7.8CVE-2025-47175ExploitEPSS 2.5%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  36. 7.8CVE-2025-47174EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  37. 7.8CVE-2025-47173EPSS 0.6%

    Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.

  38. 6.7CVE-2025-47171ExploitEPSS 1.8%

    Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

  39. 7.8CVE-2025-47170EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  40. 7.8CVE-2025-47169EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  41. 7.8CVE-2025-47168EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  42. 8.4CVE-2025-47167EPSS 0.7%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  43. 7.8CVE-2025-47165ExploitEPSS 2.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  44. 8.4CVE-2025-47164EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  45. 8.4CVE-2025-47162EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  46. 7.8CVE-2025-32705EPSS 0.5%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2025-32704EPSS 0.4%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2025-30393EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2025-30386EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  50. 7.8CVE-2025-30383EPSS 0.6%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.