Microsoft Office Long Term Servicing Channel vulnerabilities

CVE-2025-49711 [HIGH] CWE-416 CVE-2025-49711: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53737 [HIGH] CWE-122 CVE-2025-53737: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53738 [HIGH] CWE-416 CVE-2025-53738: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-53741 [HIGH] CWE-122 CVE-2025-53741: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-53761 [HIGH] CWE-416 CVE-2025-53761: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locall Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-47174 [HIGH] CWE-122 CVE-2025-47174: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59222 [HIGH] CWE-416 CVE-2025-59222: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-59243 [HIGH] CWE-416 CVE-2025-59243: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-49700 [HIGH] CWE-416 CVE-2025-49700: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-53734 [HIGH] CWE-416 CVE-2025-53734: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2025-53730 [HIGH] CWE-416 CVE-2025-53730: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2025-59238 [HIGH] CWE-416 CVE-2025-59238: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locall Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-59226 [HIGH] CWE-416 CVE-2025-59226: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2021-40481 [HIGH] CVE-2021-40481: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2025-29816 [HIGH] CWE-349 CVE-2025-29816: Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a secur Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

CVE-2021-40480 [HIGH] CVE-2021-40480: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2021-43875 [HIGH] CVE-2021-43875: Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2024-20677 [HIGH] CWE-122 CVE-2024-20677: A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vu A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have access to it. This includes Office 2019, Office 2021, Office

CVE-2024-30042 [HIGH] CWE-502 CVE-2024-30042: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-24075 [HIGH] CWE-121 CVE-2025-24075: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.