High · published December 9, 2025
⚡ An out-of-bounds read in Microsoft Office Excel could let an unauthorized attacker execute code on your local machine — that’s like leaving your front door wide open for intruders! Think of it as a delivery person reading your package label without checking if they actually belong there — anyone could slip in and take over your living room. 📦 If exploited, an attacker could execute arbitrary code on your system, potentially leading to data theft, system compromise, or even complete control over your device. This isn't just a headache; it could lead to severe breaches of sensitive information!
Think of it as a delivery person reading your package label without checking if they actually belong there — anyone could slip in and take over your living room. 📦 This vulnerability arises from an out-of-bounds read, allowing attackers to access memory locations they shouldn't — it's like finding a way to peek into a restricted section of a library.
If exploited, an attacker could execute arbitrary code on your system, potentially leading to data theft, system compromise, or even complete control over your device. This isn't just a headache; it could lead to severe breaches of sensitive information! To protect your system, ensure you update Excel to the latest version that addresses this issue. Regularly check for updates and employ strict user permissions to limit access to sensitive data. Stay vigilant! You’ve got this! Stay proactive and follow these steps to lock down your security! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/365_apps | all versions | — |
| microsoft/365_apps | all versions | — |
| microsoft/excel | all versions | — |
| microsoft/excel | all versions | — |
| microsoft/office | all versions | — |
| microsoft/office | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_long_term_servicing_channel | all versions | — |
| microsoft/office_online_server | < 16.0.10417.20075 | 16.0.10417.20075 |