Multiple vulnerabilities in Microsoft Office

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft AutoUpdate (MAU) can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2025-21381
  CVE-2025-21386
  CVE-2025-24036
  CVE-2025-21397
  CVE-2025-21392
  CVE-2025-21383
  CVE-2025-21387
  CVE-2025-21400
  CVE-2025-21394
  CVE-2025-21390
  

Связанные продукты

• Microsoft-Office
• Microsoft-Excel
• Microsoft-SharePoint

Список CVE

• CVE-2025-21381
  critical
• CVE-2025-21386
  critical
• CVE-2025-24036
  high
• CVE-2025-21397
  critical
• CVE-2025-21392
  critical
• CVE-2025-21383
  high
• CVE-2025-21387
  critical
• CVE-2025-21400
  critical
• CVE-2025-21394
  critical
• CVE-2025-21390
  critical

Список KB

• 5002685
• 5002684
• 5002686
• 5002179
• 5002678
• 5002687
• 5002679
• 5002681

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com