CVE-2025-26642

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:access:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:-:*:x64:*
cpe:2.3:a:microsoft:office:2016:*:*:*:-:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x64:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*

History

09 Jul 2025, 16:56

Type Values Removed Values Added
First Time Microsoft access
Microsoft 365 Apps
Microsoft excel
Microsoft sharepoint Server
Microsoft office
Microsoft office Long Term Servicing Channel
Microsoft office Online Server
Microsoft
CPE cpe:2.3:a:microsoft:office:2016:*:*:*:-:*:x64:*
cpe:2.3:a:microsoft:office:2016:*:*:*:-:*:x86:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x64:*
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:access:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642 - Vendor Advisory

09 Apr 2025, 20:03

Type Values Removed Values Added
CWE CWE-125
CWE-190
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : unknown

08 Apr 2025, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-08 18:15

Updated : 2025-07-09 16:56


NVD link : CVE-2025-26642

Mitre link : CVE-2025-26642


JSON object : View

Products Affected

microsoft

  • office_long_term_servicing_channel
  • office_online_server
  • sharepoint_server
  • access
  • excel
  • 365_apps
  • office
CWE

No CWE.