NetSight
high7.8

CVE-2025-27746

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Impact

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected products

VendorProductAffected versions
Microsoft365 Apps
All versions
MicrosoftOffice
Versions 2016, 2019
MicrosoftOffice Long Term Servicing Channel
Versions 2021, 2024
MicrosoftOffice Online Server
All versions
MicrosoftSharepoint Server
before 16.0.10417.20003

Weakness classification

References