Kaspersky Threats — A página que você está procurando não foi encontrada.<br>Mas você pode ver nossas mais recentes vulnerabilidades e ameaças descritas.

Kaspersky ID:

KLA83573

Data de detecção:

05/13/2025

Atualizado:

05/19/2025

Descrição

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft PowerPoint can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.
A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.

Comunicados originais

Produtos relacionados

Lista de CVE

CVE-2025-29976
critical
CVE-2025-29977
critical
CVE-2025-29978
critical
CVE-2025-29979
critical
CVE-2025-30375
critical
CVE-2025-30376
critical
CVE-2025-30377
critical
CVE-2025-30378
high
CVE-2025-30379
critical
CVE-2025-30381
critical
CVE-2025-30382
critical
CVE-2025-30383
critical
CVE-2025-30384
high
CVE-2025-30386
critical
CVE-2025-30388
critical
CVE-2025-30393
critical
CVE-2025-32704
critical
CVE-2025-32705
critical

Lista de KB

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com

Encontrou uma imprecisão na descrição desta vulnerabilidade? Avise-nos!

Kaspersky ID:

KLA83573

Data de detecção:

05/13/2025

Atualizado:

05/19/2025

Nível de gravidade

critical

Solução

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update component usually can be accessed from the Control Panel) and updates from the Update Options section, that are listed in your Office Account (Office Account tab usually can be accessed from the File menu)
Install Office updates

Impactos

ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Produtos afetados

Microsoft Excel 2016 (32-bit edition)
Microsoft SharePoint Enterprise Server 2016
Microsoft Office for Android
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC for Mac 2024
Office Online Server
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2016 (64-bit edition)
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft SharePoint Server 2019
Microsoft Excel 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition)
Microsoft SharePoint Server Subscription Edition
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office for Universal

Multiple vulnerabilities in Microsoft Office

Descrição

Comunicados originais

Produtos relacionados

Lista de CVE

Lista de KB

Saiba mais