CVE-2025-30383: Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Other sources
Microsoft Excel Remote Code Execution Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30383?
CVE-2025-30383 is considered a critical vulnerability due to its potential to allow unauthorized code execution.
How do I fix CVE-2025-30383?
To fix CVE-2025-30383, ensure that you apply the latest security updates provided by Microsoft for the affected software.
Which versions of Microsoft Excel are affected by CVE-2025-30383?
CVE-2025-30383 affects various versions of Microsoft Excel, including Excel 2016, Office 2019, and Office LTSC 2021 and 2024.
What type of attack can CVE-2025-30383 enable?
CVE-2025-30383 can enable an attacker to execute arbitrary code locally by exploiting a type confusion vulnerability.
Are all Office editions impacted by CVE-2025-30383?
No, only specific editions of Microsoft Office, such as Office LTSC and certain versions of Excel, are impacted by CVE-2025-30383.