Multiple vulnerabilities in Microsoft Office

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft PowerPoint can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft Teams can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
6. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
7. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
8. An elevation of privilege vulnerability in Microsoft Office can be exploited remotely to gain privileges.
9. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
10. A security feature bypass vulnerability in Office Developer Platform can be exploited remotely to bypass security restrictions.

Первичный источник обнаружения

• CVE-2025-49705
  CVE-2025-49731
  CVE-2025-49702
  CVE-2025-49700
  CVE-2025-49711
  CVE-2025-49699
  CVE-2025-48812
  CVE-2025-49695
  CVE-2025-49696
  CVE-2025-49704
  CVE-2025-49701
  CVE-2025-47994
  CVE-2025-49697
  CVE-2025-49703
  CVE-2025-49737
  CVE-2025-49706
  CVE-2025-49698
  CVE-2025-49756
  

Связанные продукты

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-Word
• Microsoft-SharePoint
• Microsoft-Teams-for-Desktop

Список CVE

• CVE-2025-49705
  critical
• CVE-2025-49731
  warning
• CVE-2025-49702
  critical
• CVE-2025-49700
  critical
• CVE-2025-49711
  critical
• CVE-2025-49699
  high
• CVE-2025-48812
  high
• CVE-2025-49695
  critical
• CVE-2025-49696
  critical
• CVE-2025-49704
  critical
• CVE-2025-49701
  critical
• CVE-2025-47994
  critical
• CVE-2025-49697
  critical
• CVE-2025-49703
  critical
• CVE-2025-49737
  high
• CVE-2025-49706
  high
• CVE-2025-49698
  critical
• CVE-2025-49756
  warning

Список KB

• 5002742
• 5002655
• 5002744
• 5002747
• 4464583
• 5002749
• 5002745
• 5002739
• 5002734
• 5002746
• 5001941
• 5002740
• 5002741
• 5002751
• 5002743

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com