Microsoft Excel Untrusted Pointer Dereference Vulnerability Allowing Local Remote Code Execution

Vulnerability

A vulnerability in Microsoft Office Excel has been identified, allowing an unauthorized attacker to execute code locally on the affected system. This issue arises from an untrusted pointer dereference.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, security updates will be released as soon as possible, with customers being notified via a revision to the CVE information.

Added: Dec 9, 2025, 10:33 PM
Updated: Dec 9, 2025, 10:33 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
1.4
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.