CVE-2025-62552CWE-23

CVE-2025-62552

High Β· published December 9, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky path traversal flaw in Microsoft Office Access could let an unauthorized attacker run code locally, and it’s easier than you might think! πŸ” Think of it like a delivery driver following unclear directions and accidentally entering the wrong building β€” with the right info, they can access sensitive areas without a keycard. πŸ“¦ If exploited, this vulnerability could allow an attacker to execute malicious code on your system, potentially leading to data theft, system compromise, or even total loss of control over affected devices. Imagine an unwanted intruder commandeering your work environment β€” absolutely devastating!

Put simply

Think of it like a delivery driver following unclear directions and accidentally entering the wrong building β€” with the right info, they can access sensitive areas without a keycard. πŸ“¦ This relative path traversal vulnerability occurs when Microsoft Office Access does not properly validate file paths, allowing unauthorized code execution from unintended directories.

What to do

If exploited, this vulnerability could allow an attacker to execute malicious code on your system, potentially leading to data theft, system compromise, or even total loss of control over affected devices. Imagine an unwanted intruder commandeering your work environment β€” absolutely devastating! To mitigate this risk, ensure that your Microsoft Office Access is updated to the latest version. Regularly audit your file permissions and conduct security assessments to ensure unauthorized access is blocked. Don't wait β€” patch today! You've got this! With a few quick updates and checks, you can strengthen your defenses and keep your environment secure. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00596 Β· 47.8th percentile
Weakness
CWE-23 Β· Relative Path Traversal
Published
2025-12-09T23:16Z
Affected products (9)
ProductVersionsFixed in
microsoft/365_appsall versionsβ€”
microsoft/365_appsall versionsβ€”
microsoft/accessall versionsβ€”
microsoft/officeall versionsβ€”
microsoft/officeall versionsβ€”
microsoft/office_long_term_servicing_channelall versionsβ€”
microsoft/office_long_term_servicing_channelall versionsβ€”
microsoft/office_long_term_servicing_channelall versionsβ€”
microsoft/office_long_term_servicing_channelall versionsβ€”
References (1)
EPSS history
Timeline
  • 09 DEC 17:55Z
    Microsoft Access Remote Code Execution Vulnerability
    cvelistv5