What is the CVSS score of CVE-2025-47175?

CVE-2025-47175 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of 365 Apps are affected by CVE-2025-47175?

CVE-2025-47175 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows unauthenticated attackers to execute arbitrary code on affected systems through malicious presentation…. A patch is available.

Is there a public PoC exploit available for CVE-2025-47175?

Yes, a public proof-of-concept exploit is available for CVE-2025-47175. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2025-47175?

Within 24 hours: Identify all systems running Microsoft Office PowerPoint and verify current version; communicate vulnerability advisory to all users instructing them not to open PowerPoint files from untrusted sources. Within 7 days: Apply the vendor-released patch from Microsoft for PowerPoint across all affected systems; prioritize systems handling sensitive documents. Within 30 days: Complete patch deployment verification across the entire organization; conduct user awareness training on file-based malware risks.

365 Apps CVE-2025-47175

EUVD-2025-17724 HIGH

Use After Free (CWE-416)

2025-06-10 secure@microsoft.com

Denial Of Service Microsoft 365 Apps Office Office Long Term Servicing Channel Powerpoint

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:40 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

16.98.25060824,16.0.5504.1000

EUVD ID Assigned

Mar 14, 2026 - 19:49 euvd

EUVD-2025-17724

Analysis Generated

Mar 14, 2026 - 19:49 vuln.today

PoC Detected

Jul 09, 2025 - 13:27 vuln.today

Public exploit code

CVE Published

Jun 10, 2025 - 17:23 nvd

HIGH 7.8

DescriptionNVD

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

AnalysisAI

Use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthenticated local attacker to execute arbitrary code with high integrity and confidentiality impact. The vulnerability requires user interaction (opening a malicious PowerPoint file) but no elevated privileges, making it accessible to standard user accounts. With a CVSS score of 7.8 and local attack vector, this represents a moderate-to-high severity risk for organizations where PowerPoint is widely deployed.

Technical ContextAI

This vulnerability exploits a use-after-free condition (CWE-416) in PowerPoint's file parsing or object handling logic. Use-after-free flaws occur when a program references memory that has been deallocated, allowing attackers to corrupt heap structures or execute code at a freed memory location. In PowerPoint's context, this likely involves the Office Open XML (OOXML) file format parser or the presentation object model, where specially crafted .pptx or .ppt files trigger premature object destruction followed by subsequent access. The vulnerability affects Microsoft Office PowerPoint components responsible for rendering or processing presentation content, with the attack vector being local file access requiring user interaction to open a malicious presentation.

RemediationAI

Apply Microsoft's official security update for CVE-2025-47175 via: (1) Windows Update/Microsoft Update for Windows-integrated Office installations, (2) Microsoft 365 automatic updates for cloud-subscribed versions, (3) Direct download from Microsoft Download Center for standalone Office versions. Immediate patch availability is typical for CVSS 7.8+ flaws. Interim mitigations pending patch deployment: (1) Disable PowerPoint file opening from untrusted sources; (2) Configure AppLocker/WDAC to restrict PowerPoint execution; (3) Use Windows Defender/Microsoft Defender for endpoint with real-time file scanning; (4) Block .pptx/.ppt files at email gateway if feasible for operations; (5) Disable macros in PowerPoint if not required. Verify patch installation via 'Help > About' in PowerPoint to confirm build number matches advisory.

More from same product – last 7 days

CVE-2026-10044 HIGH This Week POC

7.5 May 28

{filename} endpoint. The flawed traversal filter only rejects forward slashes and '..' sequences, leaving absolute Windo

CVE-2026-40412 CRITICAL Monitor

10.0 May 22

Remote code execution in Microsoft Azure Orbital Spatio allows unauthenticated network attackers to upload dangerous fil

CVE-2026-41104 CRITICAL Monitor

10.0 May 22

Unsafe deserialization in Microsoft Planetary Computer Pro (Geocatalog) lets a remote unauthenticated attacker craft mal

CVE-2026-23652 CRITICAL Monitor

10.0 May 22

Remote code execution in Microsoft Power Pages allows unauthenticated network attackers to inject and execute operating-

CVE-2026-47280 CRITICAL Monitor

10.0 May 22

Privilege elevation in Microsoft Azure Resource Manager (ARM) allows remote unauthenticated attackers to bypass authenti

CVE-2025-47175 vulnerability details – vuln.today

Back

365 Apps CVE-2025-47175

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More from same product – last 7 days

Share

External POC / Exploit Code