cbcvebase.
CVE-2025-53736
published 2025-08-12

CVE-2025-53736: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

medium6.2CVSS 3.1
AVLACLPRNUINSUCHINAN
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftmicrosoft_365_apps_for_enterprise>= 16.0.1 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_2019>= 19.0.0 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_2021>= 16.0.1 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_2024>= 16.0.0 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_for_mac_2021>= 16.0.1 < 16.100.2508101516.100.25081015
microsoftmicrosoft_office_ltsc_for_mac_2024>= 16.0.0 < 16.100.2508101516.100.25081015
microsoftmicrosoft_sharepoint_enterprise_server_2016>= 16.0.0 < 16.0.5513.100216.0.5513.1002
microsoftmicrosoft_sharepoint_server_2019>= 16.0.0 < 16.0.10417.2004116.0.10417.20041
microsoftmicrosoft_word_2016>= 16.0.1 < 16.0.5513.100016.0.5513.1000
microsoftoffice
microsoftoffice_long_term_servicing_channel
microsoftoffice_long_term_servicing_channel
microsoftsharepoint_enterprise_server
microsoftsharepoint_server
microsoftword
msrcmicrosoft_365_apps_for_enterprise_for_32-bit_systems
msrcmicrosoft_365_apps_for_enterprise_for_64-bit_systems
msrcmicrosoft_office_2019_for_32-bit_editions
msrcmicrosoft_office_2019_for_64-bit_editions
msrcmicrosoft_office_ltsc_2021_for_32-bit_editions
msrcmicrosoft_office_ltsc_2021_for_64-bit_editions
msrcmicrosoft_office_ltsc_2024_for_32-bit_editions
msrcmicrosoft_office_ltsc_2024_for_64-bit_editions
msrcmicrosoft_office_ltsc_for_mac_2021
msrcmicrosoft_office_ltsc_for_mac_2024