The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-12-2025 advisory.

  - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
    (CVE-2025-53738, CVE-2025-53784)

  - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2025-53735)

  - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2025-53737, CVE-2025-53741)

  - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an     unauthorized attacker to execute code locally. (CVE-2025-53739)

  - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2025-53759)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Security Updates for Microsoft Office Products (August 2025) (macOS)

high Nessus Plugin ID 249168

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Oct 29, 2025, 8:57 PM New Plugin Feed: 202510292057
Version 1.2 Aug 15, 2025, 7:38 PM New Plugin Feed: 202508151938
Version 1.1 Aug 13, 2025, 7:42 PM New Plugin Feed: 202508131942