Fixes 5 records
Priority MEDIUM 60
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.22566 · Published 2025-06-10 · Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-502
Priority MEDIUM 60
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.21819 · Published 2025-06-10 · Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-502
Priority MEDIUM 44
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01764 · Published 2025-06-10 · Fixed in 16.0.5504.1001, 16.0.10417.20018 +1 CWE-89
Priority LOW 37
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00684 · Published 2025-06-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.98.25060824 +3 CWE-122
Priority LOW 37
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00669 · Published 2025-06-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.98.25060824 +3 CWE-416
THREATIST.IORead the docs