Product:
Microsoft Office Excel
Summary
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to potential information leakage, impacting the confidentiality of sensitive data. Users are required to interact with the malicious content for exploitation to occur.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-60728 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by a user, triggers the untrusted pointer dereference. The attacker can then gain unauthorized access to information over the network. User interaction is necessary, as the victim must open the malicious file for the exploit to succeed.
Affected Products
- Microsoft Office Excel: Vulnerable to untrusted pointer dereference, allowing information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Microsoft Office Excel and apply any available security updates. Additionally, users should avoid opening files from untrusted sources and be cautious of unexpected email attachments.