Microsoft Office Untrusted Pointer Dereference Vulnerability Leading to Remote Code Execution

Vulnerability

A vulnerability allowing remote code execution has been identified in Microsoft Office. This issue arises from an untrusted pointer dereference, which could enable an unauthorized attacker to execute code on the affected system. The vulnerability is present in several different versions of Microsoft Office, including Office 2016, Office 2019, Office 2021, and various editions of Office for Mac.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Instructions for downloading this update are available on the Microsoft Update Catalog or through the Microsoft 365 Apps Security Updates page.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.