High severity7.1NVD Advisory· Published Oct 14, 2025· Updated Jun 17, 2026
CVE-2025-59235
CVE-2025-59235
Description
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected products
29cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*+ 5 more
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*range: <16.0.10417.20059
- (no CPE)range: 16.0.0.0
cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*+ 2 more
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- (no CPE)range: 16.0.0
- Microsoft/Microsoft 365 Apps for Enterprisev5Range: 16.0.1
- Microsoft/Microsoft Access 2016 (32-bit edition)v5Range: 16.0.0
- Range: 16.0.0.0
- Range: 19.0.0
16.0.1+ 1 more
- (no CPE)range: 16.0.1
- (no CPE)range: 16.0.0
- Range: 16.0.0
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59235nvdVendor Advisory
News mentions
0No linked articles in our index yet.