← Back

CVE-2025-47173

nvd nist
Published: Jun 10, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected (7)

Microsoft
3 products
365 Apps
Office
Office Long Term Servicing Channel
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
365 Apps
All versions
Microsoft
Office
Version 2016
Office
Version 2019
Microsoft
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2024
Office Long Term Servicing Channel
Version 2024

Related CWEs

CWE-641
Improper Restriction of Names for Files and Other Resources
The product constructs the name of a file or other resource using input from an upstream component, but it does not restrict or incorrectly restricts the resulting name.

References (1)

Source: secure@microsoft.com
Broken Link

Timeline

No history available yet.