Fixes 4 records
Priority MEDIUM 59
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.2133 · Published 2025-08-12 · Fixed in 16.0.5513.1002, 16.0.10417.20041 CWE-502
Priority MEDIUM 50
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.20609 · Published 2025-08-12 · Fixed in 16.0.5513.1002, 16.0.10417.20041 +1 CWE-918
Priority LOW 39
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00546 · Published 2025-08-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.100.25081015 +3 CWE-681
Priority LOW 31
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 6.8· Local · No auth · No interaction · EPSS 0.005 · Published 2025-08-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.100.25081015 +3 CWE-126
THREATIST.IORead the docs