Microsoft Excel Untrusted Pointer Dereference Vulnerability Allowing Local Code Execution

Vulnerability

A vulnerability in Microsoft Office Excel has been identified, allowing an unauthorized attacker to execute code locally on the affected system. This issue arises from an untrusted pointer dereference, which could potentially be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, the security update will be released as soon as possible, and customers will be notified via a revision to this CVE information.

Added: Dec 9, 2025, 10:34 PM
Updated: Dec 9, 2025, 10:34 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
4.4
remediation
7.7
relevance
1.3
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.