CVE-2025-59229: Microsoft Office Denial of Service Vulnerability
Published Oct 14, 2025
·Updated
Microsoft Office Denial of Service Vulnerability
Other sources
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.
— Microsoft
Affected Software
9 affected componentsFixes available
Microsoft Office
Microsoft Office LTSC 2024 for 32-bit editions
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft Office LTSC 2024 for 64-bit editions
Microsoft 365 Apps
Microsoft 365 Apps
Microsoft Office Long Term Servicing Channel=2024
Microsoft Office Long Term Servicing Channel=2024
Event History
Oct 14, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionSeverity
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59229?
CVE-2025-59229 has a severity rating that indicates a denial of service vulnerability in Microsoft Office.
2
How do I fix CVE-2025-59229?
You can mitigate CVE-2025-59229 by applying the latest security updates provided by Microsoft for affected Office products.
3
Which products are affected by CVE-2025-59229?
CVE-2025-59229 affects various versions of Microsoft Office, including Microsoft 365 Apps for Enterprise and Microsoft Office LTSC 2024.
4
What type of vulnerability is CVE-2025-59229?
CVE-2025-59229 is a denial of service vulnerability caused by an uncaught exception in Microsoft Office.
5
Can CVE-2025-59229 be exploited remotely?
CVE-2025-59229 requires local access for an unauthorized attacker to exploit the vulnerability.