Product:
Microsoft Office Plus
Summary
Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network. This vulnerability can lead to significant confidentiality breaches. Attackers can exploit this issue without requiring any privileges or user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-55243 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network packets to a target running Microsoft Office Plus. By doing so, they can gain access to sensitive information and potentially impersonate legitimate users. The low attack complexity means that even those with limited technical skills can carry out the attack effectively.
Affected Products
- Microsoft Office Plus: A suite of productivity applications that may expose sensitive information if exploited.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office Plus and apply any available security updates. Additionally, organizations should implement network security measures to monitor and restrict unauthorized access attempts.