Fixes 4 records
Priority CRITICAL 97KEV
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.99995 · Published 2025-07-08 · Fixed in 16.0.5508.1000, 16.0.10417.20027 CWE-94
Priority CRITICAL 86KEV
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.99057 · Published 2025-07-08 · Fixed in 16.0.5508.1000, 16.0.10417.20027 +1 CWE-287
Priority MEDIUM 43
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01293 · Published 2025-07-08 · Fixed in 16.0.5508.1000, 16.0.10417.20027 +1 CWE-285
Priority LOW 37
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0077 · Published 2025-07-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.99.25071321 +2 CWE-416
