Priority MEDIUM 60
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.21748 · Published 2025-09-09 · Fixed in 16.0.5517.1000, 16.0.10417.20047 +1 CWE-502
Priority LOW 38
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00835 · Published 2025-09-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5517.1000 +2 CWE-416
Priority LOW 32
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00622 · Published 2025-09-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.101.25091314 +2 CWE-822
