← Voltar para CVEs
CVE-2025-59240
MEDIUM5.5
Descricao
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Detalhes CVE
Pontuacao CVSS v3.15.5
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioREQUIRED
Publicado11/11/2025
Ultima modificacao11/17/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
microsoft:365_appsmicrosoft:excelmicrosoft:officemicrosoft:office_long_term_servicing_channel
Fraquezas (CWE)
CWE-200
Referencias
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59240(secure@microsoft.com)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.