CVE-2025-49700
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
08/07/2025
Last modified:
15/07/2025
Description
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:* | ||
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:* | ||
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:* | ||
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:* | ||
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:* | ||
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:* | ||
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:* | ||
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:* | ||
cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:x64:* | ||
cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:x86:* |
To consult the complete list of CPE names with products and versions, see this page