Kaspersky Threats — Aradığınız sayfa bulunamadı.<br>Ancak en son açıklanan Güvenlik Açıkları ve Tehditimizi görebilirsiniz.

Kaspersky ID:

KLA83573

Bulunma tarihi:

05/13/2025

Yüklendi:

05/19/2025

Açıklama

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft PowerPoint can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.
A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Windows Graphics Component can be exploited remotely to execute arbitrary code.

Orijinal öneriler

İlgili ürünler

CVE Listesi

CVE-2025-29976
critical
CVE-2025-29977
critical
CVE-2025-29978
critical
CVE-2025-29979
critical
CVE-2025-30375
critical
CVE-2025-30376
critical
CVE-2025-30377
critical
CVE-2025-30378
high
CVE-2025-30379
critical
CVE-2025-30381
critical
CVE-2025-30382
critical
CVE-2025-30383
critical
CVE-2025-30384
high
CVE-2025-30386
critical
CVE-2025-30388
critical
CVE-2025-30393
critical
CVE-2025-32704
critical
CVE-2025-32705
critical

KB Listesi

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com

Bu güvenlik açığının açıklamasında bir tutarsızlık mı tespit ettiniz? Bize bildirin!

Kaspersky ID:

KLA83573

Bulunma tarihi:

05/13/2025

Yüklendi:

05/19/2025

Şiddet

critical

Çözüm

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update component usually can be accessed from the Control Panel) and updates from the Update Options section, that are listed in your Office Account (Office Account tab usually can be accessed from the File menu)
Install Office updates

Etkiler

ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Etkilenmiş ürünler

Microsoft Excel 2016 (32-bit edition)
Microsoft SharePoint Enterprise Server 2016
Microsoft Office for Android
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC for Mac 2024
Office Online Server
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Office 2016 (64-bit edition)
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft SharePoint Server 2019
Microsoft Excel 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition)
Microsoft SharePoint Server Subscription Edition
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office for Universal

Multiple vulnerabilities in Microsoft Office

Açıklama

Orijinal öneriler

İlgili ürünler

CVE Listesi

KB Listesi

Daha fazlasını okuyun