Fixes 6 records
Priority MEDIUM 45
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02518 · Published 2025-10-14 · Fixed in 16.0.5522.1000, 16.0.10417.20059 +1 CWE-502
Priority MEDIUM 43
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01394 · Published 2025-10-14 · Fixed in 16.0.5522.1000, 16.0.10417.20059 +1 CWE-20
Priority LOW 36
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.102.25101223 +2 CWE-416
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00653 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 +2 CWE-125
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00484 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 +2 CWE-125
Priority LOW 33
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.00387 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.102.25101223 +2 CWE-416
THREATIST.IORead the docs