Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft AutoUpdate (MAU) can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Fiches de renseignement originales

• CVE-2025-21381

• CVE-2025-21386
• CVE-2025-24036
• CVE-2025-21397
• CVE-2025-21392
• CVE-2025-21383
• CVE-2025-21387
• CVE-2025-21400
• CVE-2025-21394
• CVE-2025-21390

Produits associés

• Microsoft-Office
• Microsoft-Excel
• Microsoft-SharePoint

Liste CVE

• CVE-2025-21381
  critical
• CVE-2025-21386
  critical
• CVE-2025-24036
  high
• CVE-2025-21397
  critical
• CVE-2025-21392
  critical
• CVE-2025-21383
  high
• CVE-2025-21387
  critical
• CVE-2025-21400
  critical
• CVE-2025-21394
  critical
• CVE-2025-21390
  critical

Liste KB

• 5002685
• 5002684
• 5002686
• 5002179
• 5002678
• 5002687
• 5002679
• 5002681

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com