CVE-2025-30388

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVSS 3.1 · 7.8 High EPSS 4.4% KEV · Not listed

Vendors

Microsoft

Products

365 Copilot Office Office Long Term Servicing Channel and 26 more

CVE-2025-49695

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps 365 Copilot Office and 7 more

CVE-2025-62199

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 365 Apps 365 Copilot and 9 more

CVE-2022-26934

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 3.1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel and 25 more

CVE-2023-33148

Microsoft Office Elevation of Privilege Vulnerability

Microsoft Office Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2021-43255

Microsoft Office Trust Center Spoofing Vulnerability

Microsoft Office Trust Center Spoofing Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2022-26901

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Excel Excel Rt and 4 more

CVE-2023-33153

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1 · 6.8 Medium EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2022-44696

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2022-44695

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office 2019 and 5 more

CVE-2022-24511

Microsoft Office Word Tampering Vulnerability

Microsoft Office Word Tampering Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel and 1 more

CVE-2022-44694

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office 2019 and 2 more

CVE-2022-24510

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.0% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2024-30101

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office 2016 and 3 more

CVE-2022-24509

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.0% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2022-41107

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2021-42295

Visual Basic for Applications Information Disclosure Vulnerability

Visual Basic for Applications Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS 3.0% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2022-41106

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Excel Office and 3 more

CVE-2022-41105

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel

CVE-2022-24473

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel