NCSC-2025-0107

csafNLncsc_nl

NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Kwetsbaarheden verholpen in Microsoft Office

Advisory ansehen veröffentlicht 2025-04-08

Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

01

beschreibt (21)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-29823US——
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29822US——
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-29820US——
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-29816US——
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-29801US—OT erhöht—
Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
CVE-2025-29800US——
Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
CVE-2025-29794US——
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-29793US——
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-29792US——
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2025-29791US——
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27752US——
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27751US—Exploit
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27750US——
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-27749US——
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27748US——
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27747US——
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-27746US——
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27745US——
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-27744US——
Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2025-26687US——
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
20 von 21 angezeigt
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan