Microsoft Office Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Microsoft Office due to improper input validation. This issue allows an unauthorized attacker to execute code locally on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected machine.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, updates will be released as soon as possible and customers will be notified via a revision to this CVE information.

Added: Jun 10, 2025, 5:25 PM
Updated: Jun 10, 2025, 6:30 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
7.5
exploitability
4.4
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.