Kaspersky ID:
KLA90060
Erkennungsdatum:
11/11/2025
Aktualisiert:
11/15/2025

Beschreibung

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in GDI+ can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
  3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
  4. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
  5. An elevation of privilege vulnerability in Microsoft OneDrive for Android can be exploited remotely to gain privileges.
  6. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.

Ursprüngliche Informationshinweise

Ausnutzung

Public exploits exist for this vulnerability.

Betroffene Produkte

CVE Liste

  • CVE-2025-59240
    high
  • CVE-2025-60722
    high
  • CVE-2025-60724
    critical
  • CVE-2025-60726
    high
  • CVE-2025-60727
    critical
  • CVE-2025-60728
    warning
  • CVE-2025-62199
    critical
  • CVE-2025-62200
    critical
  • CVE-2025-62201
    critical
  • CVE-2025-62202
    high
  • CVE-2025-62203
    critical
  • CVE-2025-62204
    critical
  • CVE-2025-62205
    critical
  • CVE-2025-62216
    critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Do you want to save your changes?
Your message has been sent successfully.