CVE-2025-62564
BaseFortify
Publication date: 2025-12-09
Last updated on: 2025-12-09
Assigner: Microsoft Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | office_excel | 3.1 |
| microsoft | 365_apps | * |
| microsoft | excel | 2016 |
| microsoft | office_long_term_servicing_channel | 2021 |
| microsoft | office | 2019 |
| microsoft | office_long_term_servicing_channel | 2024 |
| microsoft | office_online_server | to 16.0.10417.20075 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to execute code locally on the affected system.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability could execute code locally on your system, potentially leading to full compromise of confidentiality, integrity, and availability of your data and system.
What immediate steps should I take to mitigate this vulnerability?
Apply the security updates provided by Microsoft for this vulnerability as soon as possible to prevent unauthorized code execution. Ensure that Microsoft Office Excel and related applications are updated to the latest patched versions. [1]