CVE-2025-62552: Microsoft Access Remote Code Execution Vulnerability
Microsoft Access Remote Code Execution Vulnerability
Other sources
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5530.1000Patch KB5002812
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62552?
CVE-2025-62552 has been rated with a high severity due to the potential for remote code execution.
How do I fix CVE-2025-62552?
To mitigate CVE-2025-62552, you need to apply the latest security updates provided by Microsoft for your affected software.
Which versions of Microsoft Access are affected by CVE-2025-62552?
CVE-2025-62552 affects Microsoft Access 2016, Office 2019, and various editions of Microsoft 365 Apps.
What kind of vulnerability is CVE-2025-62552?
CVE-2025-62552 is classified as a remote code execution vulnerability caused by relative path traversal.
Can CVE-2025-62552 be exploited?
Yes, CVE-2025-62552 can be exploited by unauthorized attackers to execute arbitrary code on the affected systems.