CVE-2025-47953highCWE-641

CVE-2025-47953: high-severity vulnerability in Microsoft 365 Apps for Enterprise

Microsoft Office Remote Code Execution Vulnerability

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 0.5%
exploitation probability
0.5%top 56% of all CVEs
observed exploitation
nono source reports it
In short

Microsoft Office has a flaw that lets an attacker run harmful code on your computer by exploiting how the program manages memory. This happens when Office tries to use data that has already been deleted, creating an opening for malicious actions.

Technical detail

A use-after-free vulnerability in Microsoft Office memory management allows local code execution when an attacker provides specially crafted input that causes the application to access freed memory regions. The vulnerability requires user interaction to open a malicious document and results in arbitrary code execution with the privileges of the Office process.

Summary generated and translated by AI from the official description.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft 365 Apps for EnterpriseMicrosoft · Microsoft Office 2016Microsoft · Microsoft Office 2019Microsoft · Microsoft Office for AndroidMicrosoft · Microsoft Office LTSC 2021Microsoft · Microsoft Office LTSC 2024Microsoft · Microsoft Office LTSC for Mac 2021Microsoft · Microsoft Office LTSC for Mac 2024
Related CVEs — Microsoft 365 Apps for Enterprise

In the same product, most dangerous first.

CVE-2023-23397CRITICALMicrosoft Outlook Elevation of Privilege VulnerabilityEPSS 97.2%KEVCVE-2024-21413CRITICALMicrosoft Outlook Remote Code Execution VulnerabilityEPSS 94.7%KEVCVE-2026-21509HIGHMicrosoft Office Security Feature Bypass VulnerabilityEPSS 70.8%KEVCVE-2021-42292HIGHMicrosoft Excel Security Feature Bypass VulnerabilityEPSS 43.0%KEVCVE-2023-36761MEDIUMMicrosoft Word Information Disclosure VulnerabilityEPSS 19.6%KEVCVE-2023-35311HIGHMicrosoft Outlook Security Feature Bypass VulnerabilityEPSS 15.5%KEV
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47953