Remote Code Execution Vulnerability in Microsoft Office Word by Microsoft
CVE-2025-53733

8.4HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Sharepoint Enterprise Server 2016
Microsoft Sharepoint Server 2019
Microsoft Office 2019
Microsoft 365 Apps For Enterprise
Vendor
CVE Published:
12 August 2025

What is CVE-2025-53733?

An issue has been identified in Microsoft Office Word involving incorrect conversion between numeric types, which can lead to unauthorized code execution on the local machine. This vulnerability allows attackers to exploit the flaws in numeric data handling, potentially compromising the security of affected systems. It is crucial for users of Microsoft Office Word to apply the necessary patches and updates to mitigate this risk.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 2019 32-bit Systems 19.0.0

Microsoft Office LTSC 2021 x64-based Systems 16.0.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-53733 : Remote Code Execution Vulnerability in Microsoft Office Word by Microsoft