CVE-2025-60726CWE-125

CVE-2025-60726

High · published November 11, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read flaw in Microsoft Excel means unauthorized users could sneak a peek at your sensitive info! 📊 Think of this vulnerability like someone peeking over your shoulder while you're reviewing confidential documents—if they know where to look, they can see your private notes without you ever knowing! An attacker could exploit this vulnerability to access sensitive data stored in Excel files, leading to potential data leaks and unauthorized disclosure of information. This could be absolutely devastating for individuals and organizations relying on Excel for privacy and security!

Put simply

Think of this vulnerability like someone peeking over your shoulder while you're reviewing confidential documents—if they know where to look, they can see your private notes without you ever knowing! The out-of-bounds read in Microsoft Excel allows attackers to bypass normal access controls, exposing information that should remain protected. This occurs because the software fails to properly validate the boundaries of data being accessed.

What to do

An attacker could exploit this vulnerability to access sensitive data stored in Excel files, leading to potential data leaks and unauthorized disclosure of information. This could be absolutely devastating for individuals and organizations relying on Excel for privacy and security! To remediate this issue, patch Microsoft Office Excel to the latest version as soon as possible. Additionally, review and restrict file access permissions to limit exposure to unauthorized users. Regularly audit your security settings to bolster privacy. You've got this! Just follow those steps, and you'll have your Excel files secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00623 · 49.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-11T23:15Z
Affected products (13)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/excelall versions—
microsoft/excelall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_online_server< 16.0.10417.2006816.0.10417.20068
References (1)
EPSS history
Timeline
  • 11 NOV 17:59Z
    Microsoft Excel Information Disclosure Vulnerability
    cvelistv5