CVE-2025-49704
- EPSS 64.91%
- Published 08.07.2025 16:58:05
- Last modified 30.07.2025 01:00:01
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49703
- EPSS 0.08%
- Published 08.07.2025 16:58:05
- Last modified 16.07.2025 17:40:06
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-49701
- EPSS 0.23%
- Published 08.07.2025 16:58:04
- Last modified 15.07.2025 17:07:45
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47172
- EPSS 0.2%
- Published 10.06.2025 17:02:41
- Last modified 09.07.2025 13:25:03
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47169
- EPSS 0.08%
- Published 10.06.2025 17:02:39
- Last modified 09.07.2025 13:22:51
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47168
- EPSS 0.08%
- Published 10.06.2025 17:02:39
- Last modified 09.07.2025 14:06:45
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47166
- EPSS 3.47%
- Published 10.06.2025 17:02:38
- Last modified 09.07.2025 14:02:40
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47163
- EPSS 1.89%
- Published 10.06.2025 17:02:36
- Last modified 09.07.2025 14:00:48
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- EPSS 1.13%
- Published 13.05.2025 16:58:44
- Last modified 19.05.2025 18:28:31
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.
CVE-2025-30382
- EPSS 0.57%
- Published 13.05.2025 16:58:43
- Last modified 19.05.2025 13:43:36
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.