Product:
Microsoft Office Excel
Summary
Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally. This vulnerability can lead to significant security risks, including unauthorized access to sensitive data and system control. It is crucial for users to be aware of this issue and take necessary precautions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-54899 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. They can leverage the memory issue to execute arbitrary code, potentially gaining control over the system. User interaction is required, which means the attacker may need to trick the user into opening a malicious file or executing a specific action that triggers the vulnerability.
Affected Products
- Microsoft Office Excel: A widely used spreadsheet application that is vulnerable to local code execution due to memory management issues.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office Excel and apply any available security updates. Additionally, users should be cautious about opening files from untrusted sources and consider implementing security measures that limit local access to sensitive systems.