CVE-2025-59226CWE-416

CVE-2025-59226

High · published October 14, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

⚡ An unauthorized attacker can execute code locally through a use-after-free vulnerability in Microsoft Office Visio — a recipe for chaos! 🔥 Think of it like a restaurant that didn't properly clean up after the last order; a leftover plate can still be used to serve food, leading to a surprising mix-up in the kitchen. In this case, the leftover data can be manipulated to execute harmful commands. An attacker could craft a malicious document that, when opened, executes arbitrary code on the victim's machine. This means they could potentially steal sensitive information, install malware, or take complete control of the system — absolutely devastating!

Put simply

Think of it like a restaurant that didn't properly clean up after the last order; a leftover plate can still be used to serve food, leading to a surprising mix-up in the kitchen. In this case, the leftover data can be manipulated to execute harmful commands. This vulnerability occurs when Visio continues to use a memory reference that has already been freed, allowing attackers to exploit this oversight to run malicious code.

What to do

An attacker could craft a malicious document that, when opened, executes arbitrary code on the victim's machine. This means they could potentially steal sensitive information, install malware, or take complete control of the system — absolutely devastating! Immediately update Microsoft Office Visio to the latest version where the vulnerability is patched. Encourage users to avoid opening untrusted documents until they are updated to prevent exploitation. Regularly reviewing software patches is essential for security! You've got this! Stay vigilant, update, and you’ll have your defenses strengthened in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T21:16Z
Affected products (6)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
References (1)
EPSS history
Timeline
  • 14 OCT 17:01Z
    Microsoft Office Visio Remote Code Execution Vulnerability
    cvelistv5