CNNVD-202509-1293 Information

CNNVD ID

CNNVD-202509-1293

CVE-2025-54905

  • CNNVD Published: 2025-09-09

Description (Chinese)

Microsoft Word是美国微软(Microsoft)公司的一套Office套件中的文字处理软件。 Microsoft Word存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。以下产品和版本受到影响:Microsoft SharePoint Enterprise Server 2016,Microsoft SharePoint Server 2019,Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,Microsoft Office LTSC for Mac 2021,Microsoft Office LTSC 2021 for 64-bit editions,Microsoft Office LTSC 2021 for 32-bit editions,Microsoft Office LTSC 2024 for 32-bit editions,Microsoft Office LTSC 2024 for 64-bit editions,Microsoft Office LTSC for Mac 2024,Microsoft Word 2016 (32-bit edition),Microsoft Word 2016 (64-bit edition)。

Description (English)

Microsoft Word is the word-processing software in an Office package of Microsoft (USA). Microsoft Word has a security breach. The attackers use that loophole to obtain sensitive information. The following products and versions are affected: Microsoft SharePoint Enterprise Service 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit applications, Microsoft Office 2019 for 64-bit applications, Microsoft Apps for Enterprise 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office Ltd. 2021, Microsoft Office LTSC 2021 for 32-bit appointments, Microsoft Office LTSC for 32-bit Systems for 32-bit Systems, Microsoft 365 Apps for Enterprise for Services for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for 2021 for 64-bit assessments, Microsoft Office appointments for 2024, Microsoft OfficeLTSC for Service Order 2024-W.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

微软

Published

2025-09-09

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54905

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54905

Share on: