CVE-2025-47968 CVSS:7.8

Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

CVE-2025-47962 CVSS:7.8

Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.

CVE-2025-47957 CVSS:8.4

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-47956 CVSS:5.5

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.

CVE-2025-47955 CVSS:7.8

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2025-47953 CVSS:8.4

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47176 CVSS:7.8

Microsoft Office Outlook allows an authorized attacker to execute code locally.

CVE-2025-47175 CVSS:7.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.