CVE-2025

Api.Msrc.Microsoft • December 9, 2025

Share: View original

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SMA1000 Zero-Day Vulnerability CVE-2025-40602 Exploited SonicWall has addressed a medium-severity zero-day vulnerability in the SMA1000 Appliance Management Console. This vulnerability is actively being exploited, affecting users of the SonicWall SMA1000. The company has released fixes to mitigate the risk associated with this security flaw. 37 sources 61

Extracted Entities

Attack Types (1)

Zero-day Exploit

Platforms (1)

Microsoft Office

Vulnerabilities (1)