Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
2025-07-08T17:15:56.147
2025-07-15T17:03:14.560
Analyzed
CVSSv3.1: 8.4 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | 365_apps | - | Yes |
| Application | microsoft | 365_apps | - | Yes |
| Application | microsoft | office | - | Yes |
| Application | microsoft | office | 2016 | Yes |
| Application | microsoft | office | 2016 | Yes |
| Application | microsoft | office | 2019 | Yes |
| Application | microsoft | office | 2019 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2021 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2021 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2021 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2024 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2024 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2024 | Yes |
| Application | microsoft | office_online_server | < 16.0.10417.20027 | Yes |