CVE-2025-62558CWE-416

Microsoft Word Remote Code Execution Vulnerability

High · published December 9, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

⚡ A sneaky use-after-free flaw in Microsoft Office Word could let an unauthorized attacker execute code right on your system! 🔥 Think of it like having an unfinished meal on a table; if you leave the room without clearing it away, someone could swoop in and enjoy a feast without your knowledge. This vulnerability allows attackers to take advantage of memory that should have been cleared, just like someone taking advantage of your leftover pizza! An attacker could run malicious code on your machine, potentially leading to data breaches or system compromises. Imagine an intruder walking into your digital workspace, taking control, and wreaking havoc without you even realizing it! This could be absolutely devastating.

Put simply

Think of it like having an unfinished meal on a table; if you leave the room without clearing it away, someone could swoop in and enjoy a feast without your knowledge. This vulnerability allows attackers to take advantage of memory that should have been cleared, just like someone taking advantage of your leftover pizza! This use-after-free vulnerability occurs when Microsoft Word fails to properly manage memory, allowing unauthorized code execution. Attackers exploit this flaw by manipulating freed memory locations to execute arbitrary code.

What to do

An attacker could run malicious code on your machine, potentially leading to data breaches or system compromises. Imagine an intruder walking into your digital workspace, taking control, and wreaking havoc without you even realizing it! This could be absolutely devastating. Update Microsoft Office to the latest version as soon as possible to patch this vulnerability. Review your environment for any suspicious activity and consider implementing stricter user permissions to mitigate risk. Always remain vigilant! You've got this! With a quick update, you'll lock this door tight and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00637 · 49.9th percentile
Weakness
CWE-416 · Use After Free
Published
2025-12-09T17:55Z
EPSS history
Timeline
  • 09 DEC 17:55Z
    Microsoft Word Remote Code Execution Vulnerability
    cvelistv5