CVE-2025-62564: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Other sources
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5530.1000Patch KB5002820 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.104.25121423 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.10417.20075Patch KB5002817
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62564?
CVE-2025-62564 has been rated with a high severity level due to its potential for remote code execution.
How can I fix CVE-2025-62564?
To fix CVE-2025-62564, apply the latest security patches provided by Microsoft for the affected Office products.
What products are affected by CVE-2025-62564?
CVE-2025-62564 affects various Microsoft Office products, including Excel 2016, Office LTSC 2021, and Office 2019 for both 32-bit and 64-bit editions.
What kind of attack does CVE-2025-62564 enable?
CVE-2025-62564 allows an unauthorized attacker to execute arbitrary code locally through an out-of-bounds read vulnerability.
Is there a workaround for CVE-2025-62564?
Currently, the best resolution for CVE-2025-62564 is to apply recommended updates and patches from Microsoft.