CVE-2025-30379CWE-763

Microsoft Excel Remote Code Execution Vulnerability

High · published May 13, 2025

CVSS v3.1

7.8

EPSS

1%

Percentile

46.5

In the wild

Unconfirmed

What it is

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.00570 · 46.5th percentile
Weakness: CWE-763 · Release of Invalid Pointer or Reference
Published: 2025-05-13T16:58Z

EPSS history

Timeline

13 MAY 16:58Z
Microsoft Excel Remote Code Execution Vulnerability
cvelistv5