Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Jul 2025, 16:56
Type | Values Removed | Values Added |
---|---|---|
First Time |
Microsoft access
Microsoft 365 Apps Microsoft excel Microsoft sharepoint Server Microsoft office Microsoft office Long Term Servicing Channel Microsoft office Online Server Microsoft |
|
CPE | cpe:2.3:a:microsoft:office:2016:*:*:*:-:*:x64:* cpe:2.3:a:microsoft:office:2016:*:*:*:-:*:x86:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:* cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x64:* cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:* cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:* cpe:2.3:a:microsoft:access:2016:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:* cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x86:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:* |
|
References | () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642 - Vendor Advisory |
09 Apr 2025, 20:03
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-190 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
08 Apr 2025, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-04-08 18:15
Updated : 2025-07-09 16:56
NVD link : CVE-2025-26642
Mitre link : CVE-2025-26642
JSON object : View
Products Affected
microsoft
- office_long_term_servicing_channel
- office_online_server
- sharepoint_server
- access
- excel
- 365_apps
- office
CWE
No CWE.