Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft AutoUpdate (MAU) can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2025-21381

• CVE-2025-21386
• CVE-2025-24036
• CVE-2025-21397
• CVE-2025-21392
• CVE-2025-21383
• CVE-2025-21387
• CVE-2025-21400
• CVE-2025-21394
• CVE-2025-21390

Related products

• Microsoft-Office
• Microsoft-Excel
• Microsoft-SharePoint

CVE list

• CVE-2025-21381
  critical
• CVE-2025-21386
  critical
• CVE-2025-24036
  high
• CVE-2025-21397
  critical
• CVE-2025-21392
  critical
• CVE-2025-21383
  high
• CVE-2025-21387
  critical
• CVE-2025-21400
  critical
• CVE-2025-21394
  critical
• CVE-2025-21390
  critical

KB list

• 5002685
• 5002684
• 5002686
• 5002179
• 5002678
• 5002687
• 5002679
• 5002681

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com