Product:
Microsoft Office Excel
Summary
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This vulnerability can lead to sensitive data exposure if exploited. It requires user interaction, making it a medium risk for users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-54901 |
Exploitation
To exploit this vulnerability, an attacker must convince a user to open a specially crafted file in Microsoft Office Excel. Once the file is opened, the buffer over-read can occur, allowing the attacker to access sensitive information stored in memory. This requires local access to the system and user interaction to trigger the exploit.
Affected Products
- Microsoft Office Excel: Vulnerable to buffer over-read, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Microsoft Office Excel and apply any available security updates. Additionally, users should be cautious when opening files from untrusted sources to reduce the risk of exploitation.