Kaspersky ID:
KLA82406
Detekováno:
04/08/2025
Aktualizováno:
04/14/2025

Popis

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Microsoft AutoUpdate (MAU) can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
  3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
  4. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
  5. An elevation of privilege vulnerability in Win32k can be exploited remotely to gain privileges.
  6. An elevation of privilege vulnerability in Microsoft Office can be exploited remotely to gain privileges.
  7. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
  8. A security feature bypass vulnerability in Microsoft Word can be exploited remotely to bypass security restrictions.
  9. A security feature bypass vulnerability in Microsoft OneNote can be exploited remotely to bypass security restrictions.

Oficiální doporučení

Související produkty

seznam CVE

  • CVE-2025-26642
    critical
  • CVE-2025-26687
    critical
  • CVE-2025-27744
    critical
  • CVE-2025-27745
    critical
  • CVE-2025-27746
    critical
  • CVE-2025-27747
    critical
  • CVE-2025-27748
    critical
  • CVE-2025-27749
    critical
  • CVE-2025-27750
    critical
  • CVE-2025-27751
    critical
  • CVE-2025-27752
    critical
  • CVE-2025-29791
    critical
  • CVE-2025-29792
    high
  • CVE-2025-29793
    high
  • CVE-2025-29794
    critical
  • CVE-2025-29800
    critical
  • CVE-2025-29801
    critical
  • CVE-2025-29816
    critical
  • CVE-2025-29820
    critical
  • CVE-2025-29822
    critical
  • CVE-2025-29823
    critical

seznam KB

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com

Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Zjistěte více
Kaspersky Premium
Zjistěte více
Do you want to save your changes?
Your message has been sent successfully.