Heap-Based Buffer Overflow in Microsoft Office Software by Microsoft
CVE-2025-49697

8.4HIGH

What is CVE-2025-49697?

A heap-based buffer overflow vulnerability in Microsoft Office could allow unauthorized attackers to execute arbitrary code locally. This security risk can potentially compromise the integrity and confidentiality of user data, making it essential for organizations to apply necessary patches and updates to safeguard against possible exploitations. For detailed guidance, refer to the alert by Microsoft regarding this vulnerability.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 2016 32-bit Systems 16.0.0 < 16.0.5508.1001

Microsoft Office 2019 32-bit Systems 19.0.0

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49697 : Heap-Based Buffer Overflow in Microsoft Office Software by Microsoft