Microsoft Excel Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Microsoft Excel. This issue allows an attacker to execute arbitrary code on the affected system. The vulnerability is present in multiple versions of Microsoft Excel, including Excel 2016, Excel 2019, and various editions of Microsoft Office LTSC and Microsoft 365 Apps for Enterprise. The vulnerability arises from a use-after-free error, which can be exploited by convincing a user to open a specially crafted file, potentially through social engineering tactics such as using the Preview Pane.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Instructions for downloading the security update are available on the Microsoft Update Catalog and through the Office Update channels.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.