CVE-2025-29794

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29794 · Vendor Advisory

sharepoint enterprise server 的其他漏洞

• CVE-2025-54905高危 7.1Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736中危 6.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733高危 8.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49706中危 6.5EXPLOITED (CISA KEV)Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-47994高危 8.6Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.