CVE-2025-59222CWE-416

Microsoft Word Remote Code Execution Vulnerability

High · published October 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

⚡ A use-after-free vulnerability in Microsoft Office Word could let an unauthorized attacker execute code on your local machine! 😱 Think of it like leaving a computer on with a door wide open while you run out for coffee — anyone can just walk in and take control! Office Word is the front door in this scenario, and this vulnerability leaves it ajar. This could lead to an attacker taking complete control of your system, potentially allowing them to read your sensitive documents, manipulate your files, or even install malicious software undetected. Imagine the chaos as they take over your Word processing like a rogue editor with no checks!

Put simply

Think of it like leaving a computer on with a door wide open while you run out for coffee — anyone can just walk in and take control! Office Word is the front door in this scenario, and this vulnerability leaves it ajar. The vulnerability arises due to a use-after-free issue when handling memory in Microsoft Office Word, which can be exploited to execute arbitrary code on the affected device.

What to do

This could lead to an attacker taking complete control of your system, potentially allowing them to read your sensitive documents, manipulate your files, or even install malicious software undetected. Imagine the chaos as they take over your Word processing like a rogue editor with no checks! To protect yourself, update Microsoft Office to the latest version as soon as possible, and consider disabling macros if they're enabled. Regularly check for patches to stay ahead of any potential exploits! You've got this! Secure your systems today and keep those digital doors locked! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.3th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:01Z
EPSS history
Timeline
  • 14 OCT 17:01Z
    Microsoft Word Remote Code Execution Vulnerability
    cvelistv5