CVE-2025-21363

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 822

Summary

CVE-2025-21363 is a newly disclosed remote code execution vulnerability affecting Microsoft Word. Maliciously crafted documents can exploit this weakness, allowing an attacker to gain control of an affected system and execute arbitrary code. This poses a significant threat since Microsoft Word is widely used, and successful exploitation can lead to data theft, system damage, or unauthorized access. Users are strongly encouraged to install the latest Microsoft patches to protect against this cybersecurity risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share