DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Office: Mehrere Schwachstellen
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Excel 2016, Microsoft Word 2016, Microsoft Access 2016, Microsoft Office 2016, Microsoft OneNote 2016, Microsoft Office Online Server, Microsoft SharePoint, Microsoft Office 2019, Microsoft SharePoint Server 2019, Microsoft 365 Apps, Microsoft Office und Microsoft OneNote ausnutzen, um beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und Sicherheitsvorkehrungen zu umgehen.
describes (21)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-29823US | — | — | ||
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-29822US | — | — | ||
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2025-29820US | — | — | ||
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-29816US | — | — | ||
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2025-29801US | —OT elevated | — | ||
Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-29800US | — | — | ||
Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-29794US | — | — | ||
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2025-29793US | — | — | ||
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2025-29792US | — | — | ||
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-29791US | — | — | ||
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27752US | — | — | ||
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27751US | — | Exploit | ||
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27750US | — | — | ||
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27749US | — | — | ||
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27748US | — | — | ||
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27747US | — | — | ||
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27746US | — | — | ||
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27745US | — | — | ||
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||||
| CVE-2025-27744US | — | — | ||
Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-26687US | — | — | ||
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. | ||||
references
External citations — patches, advisories, analysis.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan