EUVD-2025-17725Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
AnalysisAI
Heap-based buffer overflow vulnerability in Microsoft Office Excel that allows local attackers to execute arbitrary code with high privileges (confidentiality, integrity, and availability impact). The vulnerability requires user interaction (opening a malicious Excel file) but no special privileges, making it a practical threat to Excel users. With a CVSS score of 7.8 and local attack vector, this represents a significant code execution risk for organizations relying on Excel for document processing.
Technical ContextAI
The vulnerability exists in Microsoft Office Excel's file parsing engine, specifically in heap memory management during the processing of crafted spreadsheet files. CWE-122 (Heap-based Buffer Overflow) indicates improper bounds checking when allocating or accessing heap memory—likely occurring during parsing of Excel file structures (XLSX/XLS formats) where attacker-controlled data is used to determine buffer sizes or offsets without adequate validation. The affected technology involves Excel's document parsing libraries (likely involving Office Open XML or legacy OLE compound document format processors) which handle binary serialization of cell data, formulas, or embedded objects. This is a memory safety issue in native code components of Microsoft Office, not a scripting or macro-based vulnerability.
RemediationAI
Immediate actions: (1) Apply Microsoft security patches when released via Windows Update or Microsoft Update; (2) restrict opening of Excel files from untrusted sources; (3) use Microsoft Defender or equivalent endpoint protection with file scanning enabled; (4) disable Excel file auto-opening features in email clients; (5) educate users to avoid opening unsolicited Excel attachments. Longer-term mitigations include using Protected View/Sandbox mode in Excel (if not already enabled), deploying application whitelisting policies, and implementing file type restrictions via Group Policy or email gateways. Monitor Microsoft Security Response Center (MSRC) for patch availability and apply updates to affected Office versions immediately upon release.
Windows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX
Windows Win32k contains an out-of-bounds write vulnerability enabling local privilege escalation to SYSTEM, exploited by
The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co
Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in
A privilege escalation vulnerability (CVSS 5.5). Risk factors: actively exploited (KEV-listed), EPSS 94% exploitation pr
Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker
Twonky Server 8.5.2 on Linux and Windows allows unauthenticated access to the admin log file through a web service API b
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Serviio Media Server versions 1.4 through 1.8 on Windows contain an unauthenticated command injection in the /rest/actio
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today