| CVE-2025-59232 | CAO7.1 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14/10/2025 |
| CVE-2025-59231 | CAO7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59229 | TRUNG BÌNH5.5 | Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally. | 14/10/2025 |
| CVE-2025-59228 | CAO8.8 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 14/10/2025 |
| CVE-2025-59227 | CAO7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59226 | CAO7.8 | Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59225 | CAO7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59224 | CAO7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59223 | CAO7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59222 | CAO7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59221 | CAO7.0 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/10/2025 |
| CVE-2025-59213 | CAO8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an unauthorized attacker to elevate privileges over an adjacent network. | 14/10/2025 |
| CVE-2025-58724 | CAO7.8 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-58718 | CAO8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 14/10/2025 |
| CVE-2025-55320 | TRUNG BÌNH6.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network. | 14/10/2025 |
| CVE-2025-55315 | NGHIÊM TRỌNG9.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 14/10/2025 |
| CVE-2025-55248 | TRUNG BÌNH5.7 | Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to disclose information over a network. | 14/10/2025 |
| CVE-2025-55247 | CAO7.3 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-55240 | CAO7.3 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 14/10/2025 |
| CVE-2025-53782 | CAO7.8 | Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally. | 14/10/2025 |