CVE-2025-49699 CVSS:7

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49705 CVSS:7.8

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-49701 CVSS:8.8

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2025-49706 CVSS:6.3

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2025-49756 CVSS:3.3

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.

CVE-2025-49698 CVSS:7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-49700 CVSS:7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-49703 CVSS:7.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.