CVE-2025-53736: Microsoft Word Information Disclosure Vulnerability
Published Aug 12, 2025
·Updated
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Other sources
Microsoft Word Information Disclosure Vulnerability
— Microsoft
Affected Software
30 affected componentsFixes available
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC for Mac 2024
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft 365 Apps for Enterprise
Microsoft Office 2019 for 64-bit editions
Microsoft 365 Apps for Enterprise
Microsoft Office LTSC for Mac 2021
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office=2019
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel Macos=2021
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel Macos=2024
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server=2019
Microsoft Word=2016
Microsoft Word=2016
Microsoft SharePoint Server 2019
Microsoft Word 2016
Microsoft Word 2016
Microsoft SharePoint Enterprise Server 2016
Event History
Aug 12, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-53736?
CVE-2025-53736 is classified as an information disclosure vulnerability that could allow unauthorized access to sensitive information.
2
How do I fix CVE-2025-53736?
To fix CVE-2025-53736, apply the latest security updates provided by Microsoft for the affected products.
3
What products are affected by CVE-2025-53736?
CVE-2025-53736 affects Microsoft Word 2016, Microsoft Office 2019, Microsoft 365 Apps, and SharePoint servers among others.
4
Can CVE-2025-53736 be exploited remotely?
CVE-2025-53736 cannot be exploited remotely, it requires local access to the vulnerable Microsoft Office application.
5
What type of vulnerability is CVE-2025-53736?
CVE-2025-53736 is a buffer over-read vulnerability that potentially allows information disclosure.