Fixes 4 records
Priority MEDIUM 54
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.23627 · Published 2025-04-08 · Fixed in 16.0.5495.1002, 16.0.10417.20003 +1 CWE-502
Priority MEDIUM 48
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0485 · Published 2025-04-08 · Fixed in 16.0.5495.1002, 16.0.10417.20003 +1 CWE-285
Priority LOW 38
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00839 · Published 2025-04-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.96.25041326 +2 CWE-822
Priority LOW 37
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00782 · Published 2025-04-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1002 +1 CWE-416
