← Back to CVEs
CVE-2025-59233
HIGH7.8
Description
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published10/14/2025
Last Modified10/28/2025
Sourcenvd
Honeypot Sightings0
Affected Products
microsoft:365_appsmicrosoft:excelmicrosoft:officemicrosoft:office_long_term_servicing_channelmicrosoft:office_online_server
Weaknesses (CWE)
CWE-843
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59233(secure@microsoft.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.