High severity8.4NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026
CVE-2025-49697
CVE-2025-49697
Description
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected products
24- Microsoft/Microsoft 365 Apps for Enterprisev5Range: 16.0.1
16.0.0+ 1 more
- (no CPE)range: 16.0.0
- (no CPE)range: 19.0.0
16.0.1+ 1 more
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
16.0.1+ 7 more
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
- (no CPE)
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*
16.0.0.0+ 1 more
- (no CPE)range: 16.0.0.0
- cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*range: <16.0.10417.20027
- cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:android:*:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*+ 5 more
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49697nvdVendor Advisory
News mentions
0No linked articles in our index yet.