Remote Code Execution Vulnerability in Microsoft Word
CVE-2025-21363

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft 365 Apps For Enterprise
Microsoft Office Ltsc For Mac 2021
Microsoft Office Ltsc 2024
Microsoft Office Ltsc For Mac 2024
Vendor
CVE Published:
14 January 2025

Summary

This vulnerability in Microsoft Word could allow an attacker to execute arbitrary code on the affected system. This occurs when a specially crafted document is opened in the vulnerable version of Word. If successfully exploited, an attacker could gain access to sensitive information and potentially take control of the system. Users are advised to ensure their software is up-to-date to mitigate any potential risks associated with this vulnerability.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office LTSC 2024 32-bit Systems 1.0.0

Microsoft Office LTSC for Mac 2021 Unknown 16.0.1 < 16.93.25011212

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.