New vulnerabilities – clearly explained

Microsoft 365 Apps Excel: Heap-based buffer overflow enables remote code execution

Microsoft Excel in Microsoft 365 Apps and Office for Mac contains a heap-based buffer overflow (CWE-122, CWE-193). An unauthorized attacker can execute code over a network, but a user must open a manipulated spreadsheet, typically from an email or a download. NVD rates the flaw 8.8 (high), with potential full impact on confidentiality, integrity and availability.

Microsoft · 365 Apps

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Excel: Remote code execution via integer underflow

An integer underflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network, with a CVSS score of 8.8. The attack requires that a victim opens a crafted Excel file, for example one received by email or downloaded from the internet. Microsoft 365 Apps, Office LTSC and Office for Mac are affected, and Microsoft rates the flaw as critical. No public exploit code and no exploitation in the wild are known.

Microsoft · Office Excel

Office Excel: Remote code execution via use-after-free

A use-after-free flaw in Microsoft Office Excel (CWE-416) allows an unauthorized attacker to execute code over the network with a CVSS base score of 8.8. Exploitation requires that a user opens a crafted file, for example one received by email or downloaded, so phishing is the main risk. Microsoft rates exploit code maturity as unproven, and no public proof of concept or exploitation has been confirmed.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution via use-after-free

A use-after-free memory corruption flaw in Microsoft Office Excel allows remote code execution. An unauthenticated attacker can trigger it over the network, but a user must open a malicious file or otherwise interact with it. Successful exploitation could give the attacker full control over the affected user's session, CVSS 8.8.

Microsoft · 365 Apps

Office Outlook: Remote code execution due to heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over the network, with a CVSS 3.1 base score of 9.8 (critical). Microsoft's advisory and the research notes indicate that a crafted email, processed through the preview pane, may be enough to trigger it without a click. The NVD record was still awaiting analysis in the sources reviewed, so the official scoring should be verified.

Microsoft · Office Outlook

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Outlook: Stack-based buffer overflow enables remote code execution

A stack-based buffer overflow (CWE-121) in Microsoft Office Outlook allows an unauthorized network attacker to execute code. According to the CVSS vector, the attack requires no privileges but user interaction, and it would fully compromise confidentiality, integrity and availability. The exact trigger and whether the Preview Pane is an attack vector are not verified.

Microsoft · Office Outlook

Microsoft Office Excel: Remote code execution via uninitialized resource

Microsoft Office Excel in Microsoft 365 Apps and Office LTSC editions (Windows and Mac) contains a use of uninitialized resource flaw. A remote attacker can execute code on an affected system over the network. Exploitation requires that a user interacts with a crafted file, for example by opening an attachment or download. Microsoft rates the severity as Important, and no public exploitation is known.

Microsoft · Office Excel

Microsoft Excel: Remote code execution via use-after-free

A use-after-free flaw (CWE-416) in Microsoft Excel, part of Microsoft 365 Apps and Office LTSC editions, allows remote code execution. An unauthenticated attacker can run code on the victim's system over the network. Exploitation requires the victim to open a crafted Excel file, for example one received by email or downloaded from the internet.

Microsoft · Excel

Microsoft Office Excel: Remote code execution vulnerability

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code on the affected computer. The attack requires a user to open a malicious spreadsheet, and the CVSS vector is local with user interaction. If exploited, the attacker can run code in the context of the logged-in user, which is a high-impact outcome.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution via buffer underflow

A buffer underflow (CWE-124) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The attacker needs a crafted file that the user opens, for example from an email or a download. Successful exploitation could affect confidentiality, integrity and availability of the affected system.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution via heap-based buffer overflow

Microsoft Office Excel contains a heap-based buffer overflow (CWE-122) that allows remote code execution. An attacker can run code on a victim's system by getting a user to open a crafted Excel file or link, so user interaction is required, while no privileges or authentication are needed. Affected are Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office for Mac, Office LTSC for Mac 2021 and 2024, and Office Online Server. Microsoft's CISA SSVC data lists exploitation as none at the time of the record.

Microsoft · Office Excel

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Excel: Heap-based buffer overflow leads to remote code execution

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The attack requires that a user opens or previews a manipulated Excel file, for example from an email attachment or download, but no authentication is needed. Microsoft rates the flaw at CVSS 8.8 with high impact on confidentiality, integrity and availability. Microsoft reports no public disclosure, and no known exploitation at the time of publication.

Microsoft · Office Excel

Microsoft Office Excel: Heap-based buffer overflow allows remote code execution

A heap-based buffer overflow in Microsoft Office Excel, part of Microsoft 365 Apps, Office LTSC and Office for Mac, allows an unauthorized attacker to execute code over a network. Exploitation requires that a user opens or otherwise processes a malicious Excel file, for example one delivered by email or a file share. Office Online Server is also listed as affected. Microsoft rates the issue as Important with a base CVSS score of 8.8.

Microsoft · Office Excel

Microsoft Office Word: Heap-based buffer overflow leading to code execution

A heap-based buffer overflow in Microsoft Office Word allows code execution on the affected computer. According to the CVE record, the attack is local and requires a user to open a crafted document, for example one received by email or from a file share. Microsoft rates the flaw as Important, and CISA SSVC reports total technical impact but no known exploitation.

Microsoft · Office Word

Microsoft 365 Apps: Use after free in OneNote allows local privilege escalation

Microsoft Office OneNote, part of Microsoft 365 Apps and Office LTSC editions, contains a use-after-free memory flaw (CWE-416). An authenticated local user with low privileges can exploit it to run code with elevated privileges, with high impact on confidentiality, integrity and availability. Exploitation requires local access and a valid low-privilege session, so it is most relevant as a second step after phishing, malicious documents or malware has gained a user session.

Microsoft · 365 Apps

Microsoft Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps for Enterprise and Office LTSC 2021 and 2024, allows code execution. Microsoft rates it 7.8 (CVSS 3.1, local attack vector, user interaction required). An attacker would most likely need to trick a user into opening a crafted Word document, for example one delivered by phishing mail. Microsoft describes the attacker as unauthorized, but no network-exposed service is involved.

Microsoft · Word

Microsoft Office Word: Local privilege escalation via stack-based buffer overflow

A stack-based buffer overflow in Microsoft Office Word allows a locally authorized attacker to elevate privileges. Affected are Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Office LTSC 2021, LTSC 2024 and LTSC for Mac editions. The CVSS 3.1 base score is 7.8 (High), and the attacker needs a low-privilege account or local code execution, which makes this a second-stage risk often chained with phishing.

Microsoft · Office Word

Microsoft .net

Research and translation in progress – available shortly.

Microsoft .net

Research and translation in progress – available shortly.

Microsoft .net

Research and translation in progress – available shortly.

Microsoft .NET: Security feature bypass due to improper signature verification

Improper verification of cryptographic signatures in Microsoft .NET allows an attacker to bypass a security feature over a network. According to Microsoft, on affected Linux systems signature verification might not be enforced, so untrusted package content could be installed or executed, and NuGet package signature checks could be bypassed. Exploitation requires that a user restores or runs untrusted content, and no privileges are needed. Microsoft rates the issue Important (CVSS 8.8).

Microsoft · .NET

Windows UDFS driver: NULL pointer dereference allows local code execution

A NULL pointer dereference in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized local attacker to execute code. The driver reads UDF-formatted media such as optical discs and disk images. Exploitation requires a low-privileged local account and no user interaction, so the risk is mainly on shared PCs, terminal servers and systems where users can mount removable media. Microsoft rates the CVSS base score at 7.8 (High).

Microsoft · Windows