CVE-2025-53736
published 2025-08-12CVE-2025-53736: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
PriorityP430medium6.2CVSS 3.1
AVLACLPRNUINSUCHINAN
EPSS
0.50%
40.1th percentile
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_365_apps_for_enterprise | >= 16.0.1 < https://aka.ms/OfficeSecurityReleases | https://aka.ms/OfficeSecurityReleases |
| microsoft | microsoft_office_2019 | >= 19.0.0 < https://aka.ms/OfficeSecurityReleases | https://aka.ms/OfficeSecurityReleases |
| microsoft | microsoft_office_ltsc_2021 | >= 16.0.1 < https://aka.ms/OfficeSecurityReleases | https://aka.ms/OfficeSecurityReleases |
| microsoft | microsoft_office_ltsc_2024 | >= 16.0.0 < https://aka.ms/OfficeSecurityReleases | https://aka.ms/OfficeSecurityReleases |
| microsoft | microsoft_office_ltsc_for_mac_2021 | >= 16.0.1 < 16.100.25081015 | 16.100.25081015 |
| microsoft | microsoft_office_ltsc_for_mac_2024 | >= 16.0.0 < 16.100.25081015 | 16.100.25081015 |
| microsoft | microsoft_sharepoint_enterprise_server_2016 | >= 16.0.0 < 16.0.5513.1002 | 16.0.5513.1002 |
| microsoft | microsoft_sharepoint_server_2019 | >= 16.0.0 < 16.0.10417.20041 | 16.0.10417.20041 |
| microsoft | microsoft_word_2016 | >= 16.0.1 < 16.0.5513.1000 | 16.0.5513.1000 |
| microsoft | office | — | — |
| microsoft | office_long_term_servicing_channel | — | — |
| microsoft | office_long_term_servicing_channel | — | — |
| microsoft | sharepoint_enterprise_server | — | — |
| microsoft | sharepoint_server | — | — |
| microsoft | word | — | — |
| msrc | microsoft_365_apps_for_enterprise_for_32-bit_systems | — | — |
| msrc | microsoft_365_apps_for_enterprise_for_64-bit_systems | — | — |
| msrc | microsoft_office_2019_for_32-bit_editions | — | — |
| msrc | microsoft_office_2019_for_64-bit_editions | — | — |
| msrc | microsoft_office_ltsc_2021_for_32-bit_editions | — | — |
| msrc | microsoft_office_ltsc_2021_for_64-bit_editions | — | — |
| msrc | microsoft_office_ltsc_2024_for_32-bit_editions | — | — |
| msrc | microsoft_office_ltsc_2024_for_64-bit_editions | — | — |
| msrc | microsoft_office_ltsc_for_mac_2021 | — | — |
| msrc | microsoft_office_ltsc_for_mac_2024 | — | — |
CVSS provenance
nvdv3.16.2MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
vendor_msrc6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Microsoft Word Information Disclosure Vulnerability
vendor_msrc·2025-08-12·CVSS 6.8
CVE-2025-53736 [MEDIUM] CWE-126 Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
Description: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
FAQ: What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.
FAQ: Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.
FAQ: There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any or
GHSA
GHSA-3jh7-36pw-wpwh: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally
ghsa_unreviewed·2025-08-12
CVE-2025-53736 [MEDIUM] CWE-126 GHSA-3jh7-36pw-wpwh: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
No detection rules found.
No public exploits indexed.
2025-08-12
Published