Microsoft Office Long Term Servicing Channel vulnerabilities, page 3
366 vulnerabilities
Known vulnerabilities in Microsoft Office Long Term Servicing Channel, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-54905microsoft365_apps+14
EPSS score0.62%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2025-54904microsoft365_apps+11EPSS score0.57%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54906microsoft365_apps+12EPSS score0.70%
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-54908microsoft365_apps+8EPSS score0.59%
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-54903microsoft365_apps+11EPSS score0.57%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54902microsoft365_apps+11EPSS score0.57%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54898microsoft365_apps+11EPSS score0.57%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54901microsoft365_apps+10EPSS score0.64%
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2025-54907microsoft365_apps+6EPSS score0.51%
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.CVE-2025-54899microsoft365_apps+10EPSS score0.57%
Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54896microsoft365_apps+11EPSS score0.57%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54910microsoft365_apps+9EPSS score0.61%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59234microsoft365_apps+11EPSS score0.60%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59238microsoft365_apps+8EPSS score0.38%
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-59233microsoft365_apps+11EPSS score0.53%
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-59227microsoft365_apps+11EPSS score0.52%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59225microsoft365_apps+11EPSS score0.38%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-59235microsoft365_apps+17EPSS score0.66%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2025-59243microsoft365_apps+4EPSS score0.45%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-59226microsoft365_apps+4EPSS score0.38%
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.