Product:
Microsoft Office Excel
Summary
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This vulnerability can lead to sensitive data exposure, impacting user confidentiality. Attackers can exploit this flaw to gain access to information that should remain protected.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-60726 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and require user interaction. By manipulating the application to read beyond the allocated memory boundaries, the attacker can potentially access sensitive information stored in memory. This could involve tricking the user into opening a malicious file or executing a crafted command that triggers the out-of-bounds read.
Affected Products
- Microsoft Office Excel: A widely used spreadsheet application that may allow unauthorized information disclosure due to the vulnerability.
Mitigation
To mitigate this vulnerability, users should ensure that they are running the latest version of Microsoft Office Excel with all security updates applied. Additionally, restricting local access to sensitive systems and educating users about the risks of opening untrusted files can help reduce the likelihood of exploitation.