CVE-2025-24075
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 121
Summary
CVE-2025-24075 is a critical vulnerability affecting Microsoft Office Excel. A stack-based buffer overflow issue has been identified, enabling unauthorized attackers to execute code locally on a victim's system. This means an attacker could manipulate a specially crafted Excel file to exploit this weakness and run malicious code, potentially leading to data theft, system damage, or further compromise. Users are strongly advised to update their Microsoft Office software to the latest patch to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.