F4

**Name of the Vulnerable Software and Affected Versions** Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 **Description** An out-of-bounds read in Microsoft Office Excel allows an unauthorized local attacker to disclose sensitive information. This occurs when a user opens a malicious Excel file that triggers a read operation beyond the allocated memory bounds, potentially affecting the system. **Recommendations** Update Microsoft 365 Apps for Enterprise to a version newer than 16.0.1.

**Name of the Vulnerable Software and Affected Versions** Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 **Description** A use-after-free issue in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code locally or remotely. This can be achieved by tricking a user into opening a malicious Excel file, which affects the system. **Recommendations** Update Microsoft 365 Apps for Enterprise to a version later than 16.0.1.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Excel (affected versions not specified) Microsoft Office Microsoft 365 Apps for Enterprise Microsoft Office Online Server **Description** A use-after-free issue exists in Microsoft Office Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server. This flaw could allow an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute arbitrary code and affect the system. The issue involves the use of memory after it has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. This issue enables remote attackers to execute arbitrary code and affect the system. It is recommended to apply the May 2025 patch to resolve the issue. Recommendations: Apply the May 2025 patch to resolve the issue. As a temporary workaround, consider restricting the use of Microsoft Office Excel until the patch is applied.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: The issue is related to a use after free condition in Microsoft Office Excel, which allows an unauthorized attacker to execute code locally. This could potentially lead to unauthorized access or control of the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.