← Back

CVE-2025-54901

nvd nist
Published: Sep 9, 2025Modified: Oct 1, 2025

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected (12)

Microsoft
4 products
365 Apps
Excel
Office
Office Long Term Servicing Channel
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
365 Apps
All versions
365 Apps
All versions
Microsoft
Excel
Version 2016
Excel
Version 2016
Microsoft
Office
Version 2019
Office
Version 2019
Microsoft
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2024
Office Long Term Servicing Channel
Version 2024
Office Long Term Servicing Channel
Version 2024

Related CWEs

CWE-126
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.