CVE-2025-49695 CVSS:8.4

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49696 CVSS:8.4

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49697 CVSS:8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49702 CVSS:7.8

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49704 CVSS:8.8

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-48812 CVSS:5.5

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2025-49711 CVSS:7.8

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-47994 CVSS:7.8

Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.