| CVE-2025-27752 | 高危7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27751 | 高危7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27750 | 高危7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27749 | 高危7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27748 | 高危7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27747 | 高危7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27746 | 高危7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27745 | 高危7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-27744 | 高危7.8 | Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-27743 | 高危7.8 | Untrusted search path in System Center allows an authorized attacker to elevate privileges locally. | 08/04/2025 |
| CVE-2025-27487 | 高危8.0 | Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network. | 08/04/2025 |
| CVE-2025-26687 | 高危7.5 | Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. | 08/04/2025 |
| CVE-2025-26682 | 高危7.5 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 08/04/2025 |
| CVE-2025-26642 | 高危7.8 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | 08/04/2025 |
| CVE-2025-26628 | 中危5.5 | Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally. | 08/04/2025 |
| CVE-2025-25002 | 中危5.7 | Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network. | 08/04/2025 |
| CVE-2025-29815 | 高危7.6 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | 04/04/2025 |
| CVE-2025-29796 | 中危4.7 | User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. | 04/04/2025 |
| CVE-2025-25001 | 中危4.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 04/04/2025 |
| CVE-2025-25000 | 高危8.8 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 04/04/2025 |