CVE-2025-62564CWE-125

CVE-2025-62564

High · published December 9, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read in Microsoft Office Excel could let an unauthorized attacker execute code on your local machine — that’s like leaving your front door wide open for intruders! Think of it as a delivery person reading your package label without checking if they actually belong there — anyone could slip in and take over your living room. 📦 If exploited, an attacker could execute arbitrary code on your system, potentially leading to data theft, system compromise, or even complete control over your device. This isn't just a headache; it could lead to severe breaches of sensitive information!

Put simply

Think of it as a delivery person reading your package label without checking if they actually belong there — anyone could slip in and take over your living room. 📦 This vulnerability arises from an out-of-bounds read, allowing attackers to access memory locations they shouldn't — it's like finding a way to peek into a restricted section of a library.

What to do

If exploited, an attacker could execute arbitrary code on your system, potentially leading to data theft, system compromise, or even complete control over your device. This isn't just a headache; it could lead to severe breaches of sensitive information! To protect your system, ensure you update Excel to the latest version that addresses this issue. Regularly check for updates and employ strict user permissions to limit access to sensitive data. Stay vigilant! You’ve got this! Stay proactive and follow these steps to lock down your security! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-09T23:16Z
Affected products (13)
ProductVersionsFixed in
microsoft/365_appsall versions—
microsoft/365_appsall versions—
microsoft/excelall versions—
microsoft/excelall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_long_term_servicing_channelall versions—
microsoft/office_online_server< 16.0.10417.2007516.0.10417.20075
References (1)
EPSS history
Timeline
  • 09 DEC 17:55Z
    Microsoft Excel Remote Code Execution Vulnerability
    cvelistv5