Microsoft Excel Untrusted Pointer Dereference Vulnerability Allowing Local Remote Code Execution

Vulnerability

A vulnerability in Microsoft Office Excel has been identified, allowing an unauthorized attacker to execute code locally on the affected system. This issue arises from an untrusted pointer dereference, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the local machine.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, the security update is also available via the Click-to-Run service.

Added: Nov 11, 2025, 7:05 PM
Updated: Nov 11, 2025, 7:05 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.