Read the docs
Microsoft update

KB5002623

Security Update

View on Microsoft →

Fixed in

Fixes 7 records

TI-2025-21202 CVE-2025-29791 · GHSA-ccx5-jh35-2p3c

Microsoft Excel Remote Code Execution Vulnerability

Priority LOW 38

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01064 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-843
TI-2025-20545 CVE-2025-27752 · GHSA-g3jg-gq9w-rmh8

Microsoft Excel Remote Code Execution Vulnerability

Priority LOW 38

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01064 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-122
TI-2025-20542 CVE-2025-27749 · GHSA-5vwc-px2m-7jxg

Microsoft Office Remote Code Execution Vulnerability

Priority LOW 38

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01103 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-416
TI-2025-20541 CVE-2025-27748 · GHSA-wvg7-cvgq-hhh3

Microsoft Office Remote Code Execution Vulnerability

Priority LOW 38

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01103 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-416
TI-2025-20538 CVE-2025-27745 · GHSA-hrxg-42v2-hfvm

Microsoft Office Remote Code Execution Vulnerability

Priority LOW 38

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01103 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-416
TI-2025-21203 CVE-2025-29792 · GHSA-f5p6-vmgq-f9qw

Microsoft Office Elevation of Privilege Vulnerability

Priority LOW 36

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01163 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 CWE-416
TI-2025-21224 CVE-2025-29816 · GHSA-xcw6-8574-9qv2

Microsoft Word Security Feature Bypass Vulnerability

Priority LOW 35

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00481 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-349