TI-2025-30378 CVE-2025-47994 · GHSA-c957-43mv-gcvv
Microsoft Office Elevation of Privilege Vulnerability
Priority MEDIUM 45
Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
KB5002742
Security Update
Fixed in
- Microsoft Office 2016 (32-bit edition) 16.0.5508.1001
- Microsoft Office 2016 (64-bit edition) 16.0.5508.1001
- Microsoft Word 2016 (32-bit edition) 16.0.5508.1001
- Microsoft Word 2016 (64-bit edition) 16.0.5508.1001
Fixes 7 records
TI-2025-31665 CVE-2025-49695 · GHSA-c2mq-64wf-j476
Microsoft Office Remote Code Execution Vulnerability
Priority MEDIUM 40
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
TI-2025-31667 CVE-2025-49697 · GHSA-w2v7-gqx7-w28w
Microsoft Office Remote Code Execution Vulnerability
Priority LOW 39
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
TI-2025-31666 CVE-2025-49696 · GHSA-jf3j-gf83-hhg3
Microsoft Office Remote Code Execution Vulnerability
Priority LOW 39
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
TI-2025-31672 CVE-2025-49702 · GHSA-wc94-6r6j-xg2g
Microsoft Office Remote Code Execution Vulnerability
Priority LOW 37
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
TI-2025-31668 CVE-2025-49698 · GHSA-9v4p-j8hf-grwm
Microsoft Word Remote Code Execution Vulnerability
Priority LOW 37
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
TI-2025-31670 CVE-2025-49700 · GHSA-mgrw-g7mw-q5r2
Microsoft Word Remote Code Execution Vulnerability
Priority LOW 36
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.