CVE-2025-21394

Summary

CVE-2025-21394 is a remote code execution vulnerability affecting Microsoft Excel. An attacker can exploit this issue by crafting a specially designed Excel file, potentially leading to arbitrary code execution on targeted systems. Successful exploitation allows an attacker to gain the same user rights as the current user, potentially enabling unauthorized system access and data theft. Users are strongly advised to update their Microsoft Excel software to the latest version or apply the relevant security patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.