CVE Vulnerabilities

CVE-2025-62560

Buffer Over-read

Published: Dec 09, 2025 | Modified: Dec 10, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Weakness

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Affected Software

NameVendorStart VersionEnd Version
365_appsMicrosoft- (including)- (including)
ExcelMicrosoft2016 (including)2016 (including)
OfficeMicrosoft2019 (including)2019 (including)
Office_long_term_servicing_channelMicrosoft2021 (including)2021 (including)
Office_long_term_servicing_channelMicrosoft2024 (including)2024 (including)
Office_online_serverMicrosoft*16.0.10417.20075 (excluding)

References