Microsoft has confirmed a serious remote code execution flaw in Microsoft Word, tracked as CVE-2025-59221, and issued patches across multiple Office product lines — with explicit vendor guidance that customers must install every update that applies to the specific Office/Word builds they run...
Microsoft’s advisory for CVE-2025-59243 names a memory-safety defect in Microsoft Excel that can lead to code execution when a specially crafted spreadsheet is opened, and organizations should treat the entry as a high-priority Office remediation event while applying layered mitigations and...
Microsoft’s Security Response Center has cataloged CVE-2025-53731 as a memory corruption vulnerability in Microsoft Office — a use-after-free bug that can allow an attacker to execute code locally on an affected system when a specially crafted Office file is processed. The advisory classifies...