cbcvebase.
CVE-2025-26642
published 2025-04-08

CVE-2025-26642: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected

33 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftaccess
microsoftexcel
microsoftmicrosoft_365_apps_for_enterprise>= 16.0.1 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_access_2016>= 16.0.0 < 16.0.5495.100016.0.5495.1000
microsoftmicrosoft_excel_2016>= 16.0.0.0 < 16.0.5495.100016.0.5495.1000
microsoftmicrosoft_office_2016>= 16.0.0 < 16.0.5495.100016.0.5495.1000
microsoftmicrosoft_office_2019>= 19.0.0 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_2021>= 16.0.1 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_2024>= 16.0.0 < https://aka.ms/OfficeSecurityReleaseshttps://aka.ms/OfficeSecurityReleases
microsoftmicrosoft_office_ltsc_for_mac_2021>= 16.0.1 < 16.96.2504132616.96.25041326
microsoftmicrosoft_office_ltsc_for_mac_2024>= 16.0.0 < 16.96.2504132616.96.25041326
microsoftmicrosoft_sharepoint_server_2019>= 16.0.0 < 16.0.10417.2000316.0.10417.20003
microsoftoffice
microsoftoffice
microsoftoffice_long_term_servicing_channel
microsoftoffice_long_term_servicing_channel
microsoftoffice_online_server>= 16.0.0.0 < 16.0.10417.2000316.0.10417.20003
microsoftsharepoint_server
msrcmicrosoft_365_apps_for_enterprise_for_32-bit_systems
msrcmicrosoft_365_apps_for_enterprise_for_64-bit_systems
msrcmicrosoft_access_2016
msrcmicrosoft_excel_2016
msrcmicrosoft_office_2016
msrcmicrosoft_office_2019_for_32-bit_editions
msrcmicrosoft_office_2019_for_64-bit_editions