The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the june-10-2025 advisory.

  - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2025-47164, CVE-2025-47953)

  - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2025-47165)

  - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
    (CVE-2025-47175)

  - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
    (CVE-2025-47168, CVE-2025-47170)

  - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code     locally. (CVE-2025-47169)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Security Updates for Microsoft Office Products (June 2025) (macOS)

high Nessus Plugin ID 238100

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.5 Oct 29, 2025, 8:57 PM New Plugin Feed: 202510292057
Version 1.4 Aug 13, 2025, 7:42 PM IAVM reference Plugin Feed: 202508131942
Version 1.3 Jun 14, 2025, 3:22 AM IAVM reference New STIG Severity (set to "I") Plugin Feed: 202506140322
Version 1.1 Jun 11, 2025, 2:37 AM New Plugin Feed: 202506110237