High · published October 14, 2025
⚡ A local code execution flaw in Microsoft Excel means an unauthorized attacker could run their own code on your system — yikes! Think of it as a sneaky chef slipping their recipe into your kitchen without your permission, using your own tools to whip up something malicious while you’re not looking! If exploited, an attacker could gain control of your system, running arbitrary code that could lead to unauthorized access, data theft, or even worse, a complete system takeover. This could be absolutely devastating for your sensitive information and system integrity!
Think of it as a sneaky chef slipping their recipe into your kitchen without your permission, using your own tools to whip up something malicious while you’re not looking! This vulnerability stems from a use-after-free error in Microsoft Excel, allowing an attacker to access memory that has already been freed, potentially leading to code execution.
If exploited, an attacker could gain control of your system, running arbitrary code that could lead to unauthorized access, data theft, or even worse, a complete system takeover. This could be absolutely devastating for your sensitive information and system integrity! To protect yourself, ensure you update to the latest version of Microsoft Office Excel immediately. Regularly check for security patches and consider implementing additional security measures to monitor file integrity. 🛡️ You've got this! By taking these steps, you can secure your system and keep those pesky attackers at bay! 💪😊
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/365_apps | all versions | — |
| microsoft/365_apps | all versions | — |
| microsoft/excel | all versions | — |
| microsoft/excel | all versions | — |
| microsoft/office | all versions | — |
| microsoft/office | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_online_server | < 16.0.10417.20059 | 16.0.10417.20059 |