document security

  1. CVE-2025-54898: Excel Out-of-Bounds Read Risk and Mitigations

    Microsoft’s security tracker lists CVE-2025-54898 as an out-of-bounds read vulnerability in Microsoft Excel that can be triggered by a crafted spreadsheet and may allow an attacker to achieve local code execution when a user opens a malicious file. (msrc.microsoft.com) Background Microsoft Excel...
  2. Critical Microsoft 365 PDF Export Vulnerability Fixed: Protect Sensitive Data

    A critical security vulnerability in Microsoft 365's PDF export functionality has been discovered and subsequently patched, highlighting significant risks to sensitive enterprise data. The vulnerability, which earned its discoverer a $3,000 bounty from Microsoft's Security Response Center...
  3. CVE-2025-49699: Critical Microsoft Office Remote Code Execution Vulnerability and How to Protect Against It

    A newly disclosed vulnerability, CVE-2025-49699, has emerged as a significant concern for both enterprise administrators and everyday users in the Microsoft ecosystem. This vulnerability, classified as a “Remote Code Execution” (RCE) flaw in Microsoft Office, draws particular attention due to...
  4. M-Files and Microsoft Partnership: Revolutionizing Enterprise Content Management with AI and Collaboration

    M-Files, a leader in AI-powered document management, has announced an expanded collaboration with Microsoft, aiming to revolutionize enterprise content management. This partnership integrates M-Files' metadata-driven automation and AI capabilities with Microsoft's robust collaboration tools...
  5. EchoLeak: The Critical AI Security Flaw Reshaping Enterprise Data Protection

    Microsoft 365 Copilot, Microsoft’s generative AI assistant that has garnered headlines for revolutionizing enterprise productivity, recently faced its most sobering security reckoning yet with the disclosure of “EchoLeak”—a vulnerability so novel, insidious, and systemic that it redefines what...
  6. Microsoft Disables ActiveX by Default in Office 2024: Enhancing Security and Phasing Out Legacy Tech

    Microsoft Disables ActiveX by Default in Microsoft 365 and Office 2024: The End of a Risky Era Microsoft is pulling a decisive security lever by disabling ActiveX controls by default in Windows versions of Microsoft 365 and Office 2024 applications. This change, rolling out imminently, aims to...
  7. Microsoft 365 Disables ActiveX by Default: A Major Security Move

    Microsoft is making a bold move that aims to significantly reduce one of Office’s longstanding vulnerabilities. In a bid to enhance security and protect users, Microsoft 365 for Windows is set to disable ActiveX content by default in its flagship applications—Word, Excel, PowerPoint, and Visio...
  8. 4053440 - Securely opening Microsoft Office documents that contain Dynamic Data Exchange (DDE) fields - Version: 3.0

    Revision Note: V3.0 (January 9, 2018): Microsoft has released an update for all supported editions of Microsoft Excel that allows users to set the functionality of the DDE protocol based on their environment. For more information and to download the update, see ADV170021. Summary: Microsoft is...
  9. T

    Windows 10 A way to lock folders?

    I manage an online historic archive for a local historical society. We have many documents, pictures, etc., posted in a Dropbox account, and provide links for all who desire. I'm concerned that one of us (me or one of the volunteers who has access to the account/collection) might someday...
  10. VIDEO Yellow Dots of Mystery: Is Your Printer Spying on You?

    Imagine that every time you print a document, it automatically includes a secret code that could be used to identify the printer -- and, potentially, the person who used it. Sounds like something from a spy movie, right? Unfortunately, the scenario isn't fictional. Most color laser printers and...
  11. MS15-097 - Critical: Vulnerabilities in Microsoft Graphics Component Could Allow Remote...

    Severity Rating: Critical Revision Note: V1.1 (September 8, 2015): Revised bulletin to correct the security impact and the vulnerability information for CVE-2015-2506 (from denial of service to elevation of privilege). This is an informational change only. Summary: This security update resolves...
  12. Microsoft Office "Anti-Bulletin"

    In November 2010, Microsoft released the first Security Bulletin (Link Removed due to 404 Error) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it's good for such a widely used product to be available...
  13. R

    Windows 7 How to remove user accounts

    I do not know how I got a second admin account with my name probably i was doing something in a windows program and their i gave admin rights to my first account, now i cannot delete this new account i searched how to geek and according to that the delete account is not where it should be it...