Office Security
The latest Office Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Office Buffer Over-Read Bugs Strike Word and Excel: What Enterprises Must Patch Now
Microsoft has rolled out crucial patches for two high-severity buffer over-read vulnerabilities in Microsoft Word and Excel, both enabling local attackers to extract sensitive memory contents. The...
Microsoft Patches Critical Excel Use-After-Free Flaw (CVE-2025-53735) That Executes Code via Malicious Spreadsheets
Microsoft has confirmed a serious use-after-free vulnerability in Microsoft Excel, tracked as CVE-2025-53735, that can allow attackers to execute arbitrary code on a victim’s machine simply by...
CVE-2025-53733: Patch Microsoft Word RCE Now – Numeric Conversion Flaw Exploited
Microsoft has published advisory CVE-2025-53733, warning of a remote code execution vulnerability in Microsoft Word that stems from an incorrect conversion between numeric types during document...
Microsoft Closes Excel Heap Overflow Remote Code Execution Hole (CVE-2025-53737) — Patch Now
Microsoft’s April 2025 security updates included a fix for a heap overflow vulnerability in Excel that attackers could exploit to run arbitrary code on a victim’s machine. Tracked as...
Critical Office Use-After-Free Bug (CVE-2025-53731) Lets Attackers Execute Code—Patch Now, Microsoft Warns
Microsoft’s Security Response Center has published a new advisory, CVE-2025-53731, confirming a critical use-after-free vulnerability in Microsoft Office that can let attackers execute arbitrary...
Microsoft Warns of Excel RCE Flaw CVE-2025-53759, Workarounds Provided
A newly disclosed vulnerability in Microsoft Excel, tracked as CVE-2025-53759, allows attackers to execute arbitrary code on a victim’s machine by tricking them into opening a specially crafted...
CVE-2025-53741: Microsoft Issues Emergency Excel Patch to Stop Remote Code Execution via Heap Overflow
Microsoft has disclosed a critical heap-based buffer overflow vulnerability in Excel, tracked as CVE-2025-53741, that can give attackers the ability to remotely execute code on a vulnerable machine...
Why WPS Office Has Become the Go‑To Free Microsoft Office Replacement in 2025
For millions of Windows users, the hunt for a zero-cost, fully capable office suite once led down a rabbit hole of trial expirations, web-only limitations, and counterfeit software booby traps. By...
Excel’s #BLOCKED Error Arrives as Microsoft Blocks External Links to Risky Files
Microsoft is rolling out a major security change for Excel that will see the spreadsheet application automatically block external links referencing file types deemed high-risk. Starting with Build...
Microsoft’s 2026 Office Update: Impacts on Read Aloud, Dictate, Transcribe, and Accessibility
Microsoft’s 2026 Office Update: What It Means for Read Aloud, Dictate, and Transcribe—and the Broader Future of Accessibility, Productivity, and Software Lifecycles The digital landscape is...
Microsoft to End Office Support on Windows 10 by October 2025: What Users Need to Know
Microsoft’s decision to discontinue Store-based Office apps and ultimately end support for all Office applications on Windows 10 represents one of the most significant software transitions in...
Microsoft Discontinues Microsoft 365 Store Apps: Transition to Click-to-Run and Windows 11 by 2025
As Microsoft sets the stage for the next major evolution in its productivity ecosystem, the tech giant is discontinuing Microsoft 365 (Office) Store apps in favor of the Click-to-Run deployment...