High severity8.4NVD Advisory· Published Jul 8, 2025· Updated May 22, 2026
CVE-2025-49697
CVE-2025-49697
Description
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected products
10- Microsoft/Microsoft 365 Apps for Enterprisev5Range: 16.0.1
16.0.0+ 1 more
- (no CPE)range: 16.0.0
- (no CPE)range: 19.0.0
16.0.1+ 1 more
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
- Range: 16.0.0.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49697nvdVendor Advisory
News mentions
0No linked articles in our index yet.