Summary
Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.
Details
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om willekeurige code uit te voeren in de context van het slachtoffer en daarmee mogelijk toegang krijgen tot gevoelige gegevens.
De kwetsbaarheid met kenmerk CVE-2025-29794 in Microsoft SharePoint stelt een kwaadwillende in staat om willekeurige code over een netwerk uit te voeren. Een geauthenticeerde kwaadwillende kan deze kwetsbaarheid misbruiken, en hiervoor zijn geen verhoogde rechten vereist.
De kwetsbaarheid met kenmerk CVE-2025-29822 in Microsoft OneNote stelt een kwaadwillende in staat om lokaal een beveiligingsfunctie te omzeilen. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden om een malafide bestand te openen en vervolgens op een speciaal vervaardigde URL te klikken.
```
Microsoft Office:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-27744 | 7,80 | Verkrijgen van verhoogde rechten |
| CVE-2025-27745 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-27746 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-27748 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-27749 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-29792 | 7,30 | Verkrijgen van verhoogde rechten |
| CVE-2025-26642 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-29791 | 7,80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office Word:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-27747 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-29816 | 7,50 | Omzeilen van beveiligingsmaatregel |
| CVE-2025-29820 | 7,80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office OneNote:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-29822 | 7,80 | Omzeilen van beveiligingsmaatregel |
|----------------|------|-------------------------------------|
Microsoft AutoUpdate (MAU):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-29800 | 7,80 | Verkrijgen van verhoogde rechten |
| CVE-2025-29801 | 7,80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
Microsoft Office SharePoint:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-29793 | 7,20 | Uitvoeren van willekeurige code |
| CVE-2025-29794 | 8,80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Microsoft Office Excel:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-27750 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-27752 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-27751 | 7,80 | Uitvoeren van willekeurige code |
| CVE-2025-29823 | 7,80 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|
Windows Win32K - GRFX:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2025-26687 | 7,50 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|
```
Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
Vulnerabilities 21
-
High 8.8
Microsoft SharePoint Remote Code Execution Vulnerability
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Office Elevation of Privilege Vulnerability
Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8CVE-2025-27751 Public exploit
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft OneNote Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.5
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft Word Security Feature Bypass Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.3
Microsoft Office Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
-
High 7.2CVE-2025-29793 EPSS 24%
Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Revision history
-
#1.0.0
Initiele versie