Heap-Based Buffer Overflow in Microsoft Office Software by Microsoft
CVE-2025-49697
8.4HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-49697?
A heap-based buffer overflow vulnerability in Microsoft Office could allow unauthorized attackers to execute arbitrary code locally. This security risk can potentially compromise the integrity and confidentiality of user data, making it essential for organizations to apply necessary patches and updates to safeguard against possible exploitations. For detailed guidance, refer to the alert by Microsoft regarding this vulnerability.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Office 2016 32-bit Systems 16.0.0 < 16.0.5508.1001
Microsoft Office 2019 32-bit Systems 19.0.0