Aug 2025: Microsoft Office Remote Code Execution Vulnerability
CVE-2025-53732 Published on August 12, 2025

Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Vendor Advisory NVD

Weakness Type

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().


Products Associated with CVE-2025-53732

Want to know whenever a new CVE is published for Microsoft Office? stack.watch will email you.

 

Affected Versions

Microsoft Office for Android: Microsoft Office for Universal:

Exploit Probability

EPSS
0.06%
Percentile
17.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.