High · published November 11, 2025
⚡ An out-of-bounds read flaw lurks in Microsoft Excel, letting unauthorized attackers run code locally—yikes! 💻 Think of it like a waiter at a restaurant who accidentally delivers your order to the wrong table, exposing your meal to anyone who grabs a fork. In this case, the waiter is Excel, and your sensitive data is on the plate, vulnerable to unwelcome guests! An attacker could leverage this vulnerability to execute harmful code on your machine, potentially compromising sensitive information or taking control of your system. Imagine someone hijacking your computer while you think everything is safe and sound—definitely not the surprise you want!
Think of it like a waiter at a restaurant who accidentally delivers your order to the wrong table, exposing your meal to anyone who grabs a fork. In this case, the waiter is Excel, and your sensitive data is on the plate, vulnerable to unwelcome guests! This out-of-bounds read issue in Microsoft Excel allows attackers to access memory locations they shouldn't, enabling them to run code or manipulate the application without proper authorization.
An attacker could leverage this vulnerability to execute harmful code on your machine, potentially compromising sensitive information or taking control of your system. Imagine someone hijacking your computer while you think everything is safe and sound—definitely not the surprise you want! Update your Microsoft Office to the latest version immediately to patch this vulnerability. Additionally, review your system security settings and limit access to Excel files to trusted users only. It's a good habit to monitor system activity for any unexpected behavior. You've got this! Stay proactive with your security and keep your systems safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/365_apps | all versions | — |
| microsoft/365_apps | all versions | — |
| microsoft/excel | all versions | — |
| microsoft/excel | all versions | — |
| microsoft/office | all versions | — |
| microsoft/office | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_online_server | < 16.0.10417.20068 | 16.0.10417.20068 |