Fixes 7 records
Priority LOW 37
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0057 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-843
Priority LOW 37
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0057 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-125
Priority LOW 37
Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0057 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-763
Priority LOW 37
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00612 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-122
Priority LOW 37
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00612 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-843
Priority LOW 37
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00663 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-122
Priority LOW 37
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00649 · Published 2025-05-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5500.1000 +2 CWE-416
THREATIST.IORead the docs