Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft AutoUpdate (MAU) can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2025-21381

• CVE-2025-21386
• CVE-2025-24036
• CVE-2025-21397
• CVE-2025-21392
• CVE-2025-21383
• CVE-2025-21387
• CVE-2025-21400
• CVE-2025-21394
• CVE-2025-21390

Related products

• Microsoft-Office
• Microsoft-Excel
• Microsoft-SharePoint

CVE list

• CVE-2025-21381
  high
• CVE-2025-21386
  high
• CVE-2025-24036
  high
• CVE-2025-21397
  high
• CVE-2025-21392
  high
• CVE-2025-21383
  high
• CVE-2025-21387
  high
• CVE-2025-21400
  high
• CVE-2025-21394
  high
• CVE-2025-21390
  high

KB list

• 5002685
• 5002684
• 5002686
• 5002179
• 5002678
• 5002687
• 5002679
• 5002681

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com