CVE-2025-62553: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5530.1000Patch KB5002818
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62553?
CVE-2025-62553 is classified as a critical vulnerability that allows remote code execution in Microsoft Excel.
How do I fix CVE-2025-62553?
To remediate CVE-2025-62553, ensure that you apply the latest security patches provided by Microsoft for the affected versions of Excel.
Which versions of Microsoft Excel are affected by CVE-2025-62553?
CVE-2025-62553 affects Microsoft Excel 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps.
What are the potential impacts of CVE-2025-62553?
Exploitation of CVE-2025-62553 could allow an attacker to execute arbitrary code on the victim's machine.
What actions should I take if I suspect exploitation of CVE-2025-62553?
If you suspect exploitation of CVE-2025-62553, you should immediately apply the recommended security updates and monitor your systems for unusual activity.