← Volver a CVEs
CVE-2025-59233
HIGH7.8
Descripcion
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Detalles CVE
Puntuacion CVSS v3.17.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado10/14/2025
Ultima modificacion10/28/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
microsoft:365_appsmicrosoft:excelmicrosoft:officemicrosoft:office_long_term_servicing_channelmicrosoft:office_online_server
Debilidades (CWE)
CWE-843
Referencias
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59233(secure@microsoft.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.