Security Vulnerabilities - CVEs Published In December 2025
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-12-09
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVSS Score
7.3
EPSS Score
0.001
Published
2025-12-09
Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.
CVSS Score
5.3
EPSS Score
0.002
Published
2025-12-09
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.001
Published
2025-12-09
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2025-12-09
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2025-12-09
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-12-09
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-12-09
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.002
Published
2025-12-09
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.001
Published
2025-12-09