Product:
Microsoft Office Word
Summary
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality impacts, making sensitive information accessible to attackers. The issue arises from improper handling of pointers, which can be exploited under certain conditions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-54905 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and must convince a user to interact with a malicious document. Once the document is opened, the untrusted pointer dereference can be triggered, allowing the attacker to access sensitive information stored on the system. User interaction is required, making social engineering tactics a potential vector for exploitation.
Affected Products
- Microsoft Office Word: A widely used word processing application that is vulnerable to untrusted pointer dereference, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office Word and apply any available security updates. Additionally, users should be cautious when opening documents from untrusted sources and consider implementing security measures that limit local access to sensitive information.