Fixes 7 records
Priority LOW 37
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00548 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 +2 CWE-416
Priority LOW 37
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0052 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 +2 CWE-122
Priority LOW 37
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0052 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 +1 CWE-822
Priority LOW 37
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00666 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 +2 CWE-125
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00562 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 +2 CWE-125
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00623 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 +2 CWE-125
Priority LOW 26
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00635 · Published 2025-11-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5526.1002 CWE-200