| CVE-2025-47994 | 높음8.6 | Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally. | 08/07/2025 |
| CVE-2025-47988 | 높음7.5 | Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network. | 08/07/2025 |
| CVE-2025-47178 | 높음8.0 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network. | 08/07/2025 |
| CVE-2025-21195 | 보통6.0 | Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally. | 08/07/2025 |
| CVE-2025-49713 | 높음8.8 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 02/07/2025 |
| CVE-2025-49741 | 높음7.5 | No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 01/07/2025 |
| CVE-2025-47959 | 높음7.1 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network. | 13/06/2025 |
| CVE-2025-30399 | 높음7.5 | Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. | 13/06/2025 |
| CVE-2025-47977 | 높음8.2 | Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network. | 10/06/2025 |
| CVE-2025-47968 | 높음7.8 | Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. | 10/06/2025 |
| CVE-2025-47962 | 높음7.8 | Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally. | 10/06/2025 |
| CVE-2025-47957 | 높음8.4 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 10/06/2025 |
| CVE-2025-47956 | 보통5.5 | External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally. | 10/06/2025 |
| CVE-2025-47953 | 높음8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 10/06/2025 |
| CVE-2025-47176 | 높음7.8 | '.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally. | 10/06/2025 |
| CVE-2025-47175 | 높음7.8 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 10/06/2025 |
| CVE-2025-47174 | 높음7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 10/06/2025 |
| CVE-2025-47173 | 높음7.8 | Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally. | 10/06/2025 |
| CVE-2025-47172 | 높음8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 10/06/2025 |
| CVE-2025-47171 | 보통6.7 | Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally. | 10/06/2025 |