← Back

CVE-2025-54910

nvd nist
Published: Sep 9, 2025Modified: Sep 12, 2025

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.5 / Impact: 5.9
Source: secure@microsoft.com (Secondary)

Description

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected (12)

Microsoft
3 products
365 Apps
Office
Office Long Term Servicing Channel
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
365 Apps
All versions
365 Apps
All versions
Microsoft
Office
Version 2016
Office
Version 2016
Office
Version 2019
Office
Version 2019
Microsoft
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2021
Office Long Term Servicing Channel
Version 2024
Office Long Term Servicing Channel
Version 2024
Office Long Term Servicing Channel
Version 2024

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.