CVE-2025-53784: Microsoft Word Remote Code Execution Vulnerability
Published Aug 12, 2025
·Updated
Microsoft Word Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
— Microsoft
Affected Software
16 affected componentsFixes available
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft 365 Apps for Enterprise
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft 365 Apps for Enterprise
Microsoft Office LTSC for Mac 2024
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel=2021
Microsoft Office Long Term Servicing Channel Macos=2021
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel Macos=2024
Event History
Aug 14, 2024
News Published
12:45 AM
Aug 12, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
News Published
via The Register·11:34 PM
News Published
via The Register·11:38 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-53784?
CVE-2025-53784 is a critical remote code execution vulnerability in Microsoft Word.
2
How do I fix CVE-2025-53784?
To fix CVE-2025-53784, update your Microsoft Office applications to the latest security patches provided by Microsoft.
3
Which Microsoft products are affected by CVE-2025-53784?
CVE-2025-53784 affects multiple versions of Microsoft Office, including Office LTSC for Windows and Mac and Microsoft 365 Apps for Enterprise.
4
What are the risks of not addressing CVE-2025-53784?
Failure to address CVE-2025-53784 could allow unauthorized attackers to execute arbitrary code on vulnerable systems.
5
Is user interaction required to exploit CVE-2025-53784?
Yes, exploitation of CVE-2025-53784 typically requires user interaction, such as opening a compromised document.