| CVE-2025-21264 | 高危7.1 | Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 13/05/2025 |
| CVE-2025-29825 | 中危6.5 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 02/05/2025 |
| CVE-2025-29817 | 中危5.7 | Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network. | 15/04/2025 |
| CVE-2025-32726 | 中危6.8 | Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally. | 12/04/2025 |
| CVE-2025-29834 | 高危7.5 | Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 12/04/2025 |
| CVE-2025-29803 | 高危7.3 | Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally. | 12/04/2025 |
| CVE-2025-29822 | 高危7.8 | Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally. | 08/04/2025 |
| CVE-2025-29821 | 中危5.5 | Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally. | 08/04/2025 |
| CVE-2025-29820 | 高危7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-29819 | 中危6.2 | External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally. | 08/04/2025 |
| CVE-2025-29816 | 高危7.5 | Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network. | 08/04/2025 |
| CVE-2025-29805 | 高危7.5 | Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network. | 08/04/2025 |
| CVE-2025-29804 | 高危7.3 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-29802 | 高危7.3 | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-29801 | 高危7.8 | Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-29800 | 高危7.8 | Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-29794 | 高危8.8 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 08/04/2025 |
| CVE-2025-29793 | 高危7.2 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 08/04/2025 |
| CVE-2025-29792 | 高危7.3 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-29791 | 高危7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | 08/04/2025 |