← Voltar para CVEs
CVE-2025-59233
HIGH7.8
Descricao
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Detalhes CVE
Pontuacao CVSS v3.17.8
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioREQUIRED
Publicado10/14/2025
Ultima modificacao10/28/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
microsoft:365_appsmicrosoft:excelmicrosoft:officemicrosoft:office_long_term_servicing_channelmicrosoft:office_online_server
Fraquezas (CWE)
CWE-843
Referencias
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59233(secure@microsoft.com)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.