What is the CVSS score of CVE-2025-47175?

CVE-2025-47175 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of Office are affected by CVE-2025-47175?

CVE-2025-47175 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows unauthenticated attackers to execute arbitrary code on affected systems through malicious presentation…. A patch is available.

Is there a public PoC exploit available for CVE-2025-47175?

Yes, a public proof-of-concept exploit is available for CVE-2025-47175. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2025-47175?

Within 24 hours: Identify all systems running Microsoft Office PowerPoint and verify current version; communicate vulnerability advisory to all users instructing them not to open PowerPoint files from untrusted sources. Within 7 days: Apply the vendor-released patch from Microsoft for PowerPoint across all affected systems; prioritize systems handling sensitive documents. Within 30 days: Complete patch deployment verification across the entire organization; conduct user awareness training on file-based malware risks.

Office CVE-2025-47175

EUVD-2025-17724 HIGH

Use After Free (CWE-416)

2025-06-10 secure@microsoft.com

Microsoft Denial Of Service Office Powerpoint Office Long Term Servicing Channel 365 Apps

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:40 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

16.98.25060824,16.0.5504.1000

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17724

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

PoC Detected

Jul 09, 2025 - 13:27 vuln.today

Public exploit code

CVE Published

Jun 10, 2025 - 17:23 nvd

HIGH 7.8

DescriptionCVE.org

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

AnalysisAI

Use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthenticated local attacker to execute arbitrary code with high integrity and confidentiality impact. The vulnerability requires user interaction (opening a malicious PowerPoint file) but no elevated privileges, making it accessible to standard user accounts. With a CVSS score of 7.8 and local attack vector, this represents a moderate-to-high severity risk for organizations where PowerPoint is widely deployed.

Technical ContextAI

This vulnerability exploits a use-after-free condition (CWE-416) in PowerPoint's file parsing or object handling logic. Use-after-free flaws occur when a program references memory that has been deallocated, allowing attackers to corrupt heap structures or execute code at a freed memory location. In PowerPoint's context, this likely involves the Office Open XML (OOXML) file format parser or the presentation object model, where specially crafted .pptx or .ppt files trigger premature object destruction followed by subsequent access. The vulnerability affects Microsoft Office PowerPoint components responsible for rendering or processing presentation content, with the attack vector being local file access requiring user interaction to open a malicious presentation.

RemediationAI

Apply Microsoft's official security update for CVE-2025-47175 via: (1) Windows Update/Microsoft Update for Windows-integrated Office installations, (2) Microsoft 365 automatic updates for cloud-subscribed versions, (3) Direct download from Microsoft Download Center for standalone Office versions. Immediate patch availability is typical for CVSS 7.8+ flaws. Interim mitigations pending patch deployment: (1) Disable PowerPoint file opening from untrusted sources; (2) Configure AppLocker/WDAC to restrict PowerPoint execution; (3) Use Windows Defender/Microsoft Defender for endpoint with real-time file scanning; (4) Block .pptx/.ppt files at email gateway if feasible for operations; (5) Disable macros in PowerPoint if not required. Verify patch installation via 'Help > About' in PowerPoint to confirm build number matches advisory.