CVE-2025-59235CWE-125

Microsoft Excel Information Disclosure Vulnerability

High · published October 14, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

⚡ A sneaky out-of-bounds read in Microsoft Excel could let an unauthorized attacker peek at information they shouldn't! Think of it like a nosy sibling reading your diary while you’re not in the room — they can see all the secrets without you even knowing. This vulnerability lets attackers access data that should be safely locked away, just like that personal diary should be kept under lock and key! If exploited, an attacker could gain access to sensitive information stored in Excel files, potentially leading to data leaks or further attacks. Imagine the chaos if confidential company reports or personal information are revealed — it could be absolutely devastating!

Put simply

Think of it like a nosy sibling reading your diary while you’re not in the room — they can see all the secrets without you even knowing. This vulnerability lets attackers access data that should be safely locked away, just like that personal diary should be kept under lock and key! This out-of-bounds read vulnerability in Microsoft Excel allows attackers to read memory contents outside of the intended data, making it possible for them to disclose sensitive information locally.

What to do

If exploited, an attacker could gain access to sensitive information stored in Excel files, potentially leading to data leaks or further attacks. Imagine the chaos if confidential company reports or personal information are revealed — it could be absolutely devastating! To mitigate this vulnerability, update your Microsoft Office Excel to the latest version immediately. Regularly check for updates to ensure you're protected against such security flaws in the future. Don't forget to implement strict access controls to prevent unauthorized access to sensitive files! You've got this! With these steps, your Excel files will be safer and your organization more secure! 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00653 · 50.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Microsoft Excel Information Disclosure Vulnerability
    cvelistv5