cve.bz

microsoft 365 apps vulnerabilities in 2025, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 7.8CVE-2025-62564EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  2. 7.8CVE-2025-62563EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  3. 7.8CVE-2025-62562EPSS 0.8%

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

  4. 7.8CVE-2025-62561EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  5. 7.8CVE-2025-62560EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  6. 7.8CVE-2025-62559EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  7. 7.8CVE-2025-62558EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  8. 7.8CVE-2025-62557EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  9. 7.8CVE-2025-62556EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  10. 7.0CVE-2025-62555EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  11. 7.8CVE-2025-62554EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  12. 7.8CVE-2025-62553EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  13. 7.8CVE-2025-62552EPSS 0.6%

    Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  14. 7.8CVE-2025-62216EPSS 0.4%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  15. 7.8CVE-2025-62205EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  16. 7.8CVE-2025-62203EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  17. 7.1CVE-2025-62202EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  18. 7.8CVE-2025-62201EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  19. 7.8CVE-2025-62200EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. 7.8CVE-2025-62199EPSS 0.8%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  21. 4.3CVE-2025-60728EPSS 0.8%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  22. 7.8CVE-2025-60727EPSS 0.7%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. 7.1CVE-2025-60726EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  24. 5.5CVE-2025-59240EPSS 0.6%

    Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  25. 7.8CVE-2025-59243EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2025-59238EPSS 0.4%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2025-59236EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  28. 7.1CVE-2025-59235EPSS 0.7%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  29. 7.8CVE-2025-59234EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2025-59233EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  31. 7.1CVE-2025-59232EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  32. 7.8CVE-2025-59231EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  33. 5.5CVE-2025-59229EPSS 0.4%

    Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.

  34. 7.8CVE-2025-59227EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  35. 7.8CVE-2025-59226EPSS 0.4%

    Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  36. 7.8CVE-2025-59225EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  37. 7.8CVE-2025-59224EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  38. 7.8CVE-2025-59223EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  39. 7.8CVE-2025-59222EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  40. 7.0CVE-2025-59221EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  41. 8.4CVE-2025-54910EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  42. 7.8CVE-2025-54908EPSS 0.6%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  43. 7.8CVE-2025-54907EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

  44. 7.8CVE-2025-54906EPSS 0.8%

    Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.

  45. 7.1CVE-2025-54905EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  46. 7.8CVE-2025-54904EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2025-54903EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2025-54902EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  49. 5.5CVE-2025-54901EPSS 0.6%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  50. 7.8CVE-2025-54900EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.