CVE-2025-59225CWE-416

CVE-2025-59225

High · published October 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

⚡ A local code execution flaw in Microsoft Excel means an unauthorized attacker could run their own code on your system — yikes! Think of it as a sneaky chef slipping their recipe into your kitchen without your permission, using your own tools to whip up something malicious while you’re not looking! If exploited, an attacker could gain control of your system, running arbitrary code that could lead to unauthorized access, data theft, or even worse, a complete system takeover. This could be absolutely devastating for your sensitive information and system integrity!

Put simply

Think of it as a sneaky chef slipping their recipe into your kitchen without your permission, using your own tools to whip up something malicious while you’re not looking! This vulnerability stems from a use-after-free error in Microsoft Excel, allowing an attacker to access memory that has already been freed, potentially leading to code execution.

What to do

If exploited, an attacker could gain control of your system, running arbitrary code that could lead to unauthorized access, data theft, or even worse, a complete system takeover. This could be absolutely devastating for your sensitive information and system integrity! To protect yourself, ensure you update to the latest version of Microsoft Office Excel immediately. Regularly check for security patches and consider implementing additional security measures to monitor file integrity. 🛡️ You've got this! By taking these steps, you can secure your system and keep those pesky attackers at bay! 💪😊

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:16Z
Affected products (13)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/excelall versions—
microsoft/excelall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_online_server< 16.0.10417.2005916.0.10417.20059
References (1)
EPSS history
Timeline
  • 14 OCT 17:01Z
    Microsoft Excel Remote Code Execution Vulnerability
    cvelistv5