Microsoft Office For Android vulnerabilities

CVE-2025-30377 [HIGH] CWE-416 CVE-2025-30377: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-26110 [HIGH] CWE-843 CVE-2026-26110: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-59227 [HIGH] CWE-416 CVE-2025-59227: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-62554 [HIGH] CWE-843 CVE-2025-62554: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-53732 [HIGH] CWE-122 CVE-2025-53732: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-26134 [HIGH] CWE-190 CVE-2026-26134: Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileg Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2025-49696 [HIGH] CWE-122 CVE-2025-49696: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-20846 [HIGH] CWE-126 CVE-2026-20846: Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

CVE-2025-30386 [HIGH] CWE-416 CVE-2025-30386: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-26687 [HIGH] CWE-416 CVE-2025-26687: Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-49702 [HIGH] CWE-843 CVE-2025-49702: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2024-38250 [HIGH] CWE-126 CVE-2024-38250: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2023-24910 [HIGH] CWE-476 CVE-2023-24910: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2026-24285 [HIGH] CWE-416 CVE-2026-24285: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2023-36565 [HIGH] CWE-416 CVE-2023-36565: Microsoft Office Graphics Elevation of Privilege Vulnerability Microsoft Office Graphics Elevation of Privilege Vulnerability

CVE-2026-25180 [MEDIUM] CWE-125 CVE-2026-25180: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose infor Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

CVE-2025-53799 [MEDIUM] CWE-908 CVE-2025-53799: Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclo Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

CVE-2026-45460 [MEDIUM] CWE-126 CVE-2026-45460: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2025-21338 [HIGH] CWE-190 GDI+ Remote Code Execution Vulnerability GDI+ Remote Code Execution Vulnerability GDI+ Remote Code Execution Vulnerability

CVE-2023-23391 [MEDIUM] CWE-23 Office for Android Spoofing Vulnerability Office for Android Spoofing Vulnerability Office for Android Spoofing Vulnerability