CVE-2025-60727CWE-125

CVE-2025-60727

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read flaw lurks in Microsoft Excel, letting unauthorized attackers run code locally—yikes! 💻 Think of it like a waiter at a restaurant who accidentally delivers your order to the wrong table, exposing your meal to anyone who grabs a fork. In this case, the waiter is Excel, and your sensitive data is on the plate, vulnerable to unwelcome guests! An attacker could leverage this vulnerability to execute harmful code on your machine, potentially compromising sensitive information or taking control of your system. Imagine someone hijacking your computer while you think everything is safe and sound—definitely not the surprise you want!

Put simply

Think of it like a waiter at a restaurant who accidentally delivers your order to the wrong table, exposing your meal to anyone who grabs a fork. In this case, the waiter is Excel, and your sensitive data is on the plate, vulnerable to unwelcome guests! This out-of-bounds read issue in Microsoft Excel allows attackers to access memory locations they shouldn't, enabling them to run code or manipulate the application without proper authorization.

What to do

An attacker could leverage this vulnerability to execute harmful code on your machine, potentially compromising sensitive information or taking control of your system. Imagine someone hijacking your computer while you think everything is safe and sound—definitely not the surprise you want! Update your Microsoft Office to the latest version immediately to patch this vulnerability. Additionally, review your system security settings and limit access to Excel files to trusted users only. It's a good habit to monitor system activity for any unexpected behavior. You've got this! Stay proactive with your security and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00666 · 51.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-11T23:15Z
Affected products (13)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/excelall versions—
microsoft/excelall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_online_server< 16.0.10417.2006816.0.10417.20068
References (1)
EPSS history
Timeline
  • 11 NOV 17:59Z
    Microsoft Excel Remote Code Execution Vulnerability
    cvelistv5