CVE-2025-62202CWE-125

CVE-2025-62202

High · published November 11, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

⚡ An unauthorized attacker can potentially snoop on your local files thanks to an out-of-bounds read in Microsoft Office Excel! Think of it like a restaurant where a waiter accidentally leaves the door to the kitchen ajar, allowing anyone passing by to peek at confidential recipes—yikes! This vulnerability could expose sensitive information from your Excel files, allowing attackers to gather data that could lead to further exploits. Imagine someone gaining access to your private financial reports or confidential client data—definitely not what you want!

Put simply

Think of it like a restaurant where a waiter accidentally leaves the door to the kitchen ajar, allowing anyone passing by to peek at confidential recipes—yikes! The out-of-bounds read flaw in Microsoft Office Excel occurs when an attacker can access memory outside the intended buffer, potentially leaking information stored in memory without authorization.

What to do

This vulnerability could expose sensitive information from your Excel files, allowing attackers to gather data that could lead to further exploits. Imagine someone gaining access to your private financial reports or confidential client data—definitely not what you want! To mitigate this risk, ensure that you're running the latest version of Microsoft Office and apply any available security patches. Regularly review your security settings and consider restricting file access to sensitive documents. Stay vigilant! You've got this! Follow these steps, and you'll keep those unwanted snoopers at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00562 · 46.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-11T23:15Z
Affected products (13)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/excelall versions—
microsoft/excelall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_online_server< 16.0.10417.2006816.0.10417.20068
References (1)
EPSS history
Timeline
  • 11 NOV 17:59Z
    Microsoft Excel Information Disclosure Vulnerability
    cvelistv5