CVE-2025-62200CWE-822

CVE-2025-62200

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

⚡ An untrusted pointer dereference in Microsoft Excel could let an unauthorized attacker run code on your system, like sneaking a rogue chef into your kitchen to prepare a surprise dish! 🍽️ Think of it as a kitchen where a sneaky chef gains access and starts mixing ingredients without permission, potentially ruining everything. In this case, the code could be executed without proper authorization, leading to disastrous consequences! An attacker exploiting this vulnerability could run malicious code locally, giving them full access to manipulate files, steal sensitive data, or even disrupt critical operations. The potential fallout could be absolutely devastating, affecting your entire system's integrity and security.

Put simply

Think of it as a kitchen where a sneaky chef gains access and starts mixing ingredients without permission, potentially ruining everything. In this case, the code could be executed without proper authorization, leading to disastrous consequences! The CVE-2025-62200 vulnerability stems from an untrusted pointer dereference in Microsoft Office Excel, which allows attackers to execute unauthorized code when certain conditions are met.

What to do

An attacker exploiting this vulnerability could run malicious code locally, giving them full access to manipulate files, steal sensitive data, or even disrupt critical operations. The potential fallout could be absolutely devastating, affecting your entire system's integrity and security. To protect your systems, ensure that you update Microsoft Excel to the latest version as soon as a patch is available. Additionally, review your security policies to limit the risk of unauthorized code execution. Regularly monitoring updates and vulnerabilities is key. You've got this! Stay vigilant and proactive, and you'll keep your environment safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00520 · 43.3th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2025-11-11T23:15Z
Affected products (11)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/excelall versions—
microsoft/excelall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_online_server< 16.0.10417.2006816.0.10417.20068
References (1)
EPSS history
Timeline
  • 11 NOV 17:59Z
    Microsoft Excel Remote Code Execution Vulnerability
    cvelistv5