Heap-Based Buffer Overflow Vulnerability in Microsoft Office Software
CVE-2025-54910
8.4HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 September 2025
What is CVE-2025-54910?
A heap-based buffer overflow vulnerability in Microsoft Office could allow an unauthorized attacker to execute arbitrary code on a target system. The exploit involves manipulating memory allocations within the Office applications, potentially leading to unauthorized access and control over the affected system. Users are urged to apply security updates to protect against this vulnerability and mitigate risks associated with remote code execution.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Office 2016 32-bit Systems 16.0.0 < 16.0.5517.1000
Microsoft Office 2019 32-bit Systems 19.0.0