← Retour aux CVEs
CVE-2025-59240
MEDIUM5.5
Description
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Details CVE
Score CVSS v3.15.5
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vecteur d'attaqueLOCAL
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurREQUIRED
Publie11/11/2025
Derniere modification11/17/2025
Sourcenvd
Observations honeypot0
Produits affectes
microsoft:365_appsmicrosoft:excelmicrosoft:officemicrosoft:office_long_term_servicing_channel
Faiblesses (CWE)
CWE-200
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59240(secure@microsoft.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.