Out-of-Bounds Read Vulnerability in Microsoft Office Excel
CVE-2025-54902
7.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 September 2025
What is CVE-2025-54902?
An out-of-bounds read vulnerability in Microsoft Office Excel may allow an unauthorized attacker to execute code locally. This weakness could potentially lead to exploitation if an affected user opens a specially crafted file. Users are advised to apply available security patches promptly to mitigate the risk and enhance the security of their applications. For more information, visit Microsoft's official advisory.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Excel 2016 32-bit Systems 16.0.0.0 < 16.0.5517.1000
Microsoft Office 2019 32-bit Systems 19.0.0