Microsoft update

KB5002740

Security Update

View on Microsoft →

Fixed in

Office Online Server 16.0.10417.20027

Fixes 3 records

TI-2025-31667 CVE-2025-49697 · GHSA-w2v7-gqx7-w28w

Microsoft Office Remote Code Execution Vulnerability

LOW 39

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00535 Published 2025-07-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5508.1001 +3 CWE-122

TI-2025-31681 CVE-2025-49711 · GHSA-8r72-qqq9-q3qq

Microsoft Excel Remote Code Execution Vulnerability

LOW 37

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00533 Published 2025-07-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5508.1001 +2 CWE-416

TI-2025-30999 CVE-2025-48812 · GHSA-v5j5-f44v-2p35

Microsoft Excel Information Disclosure Vulnerability

LOW 26

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00608 Published 2025-07-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5508.1001 +2 CWE-125