CVE-2025-30379

HIGH

Microsoft Office Excel - Code Injection

Title source: llm

Description

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0079
EPSS Percentile 73.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-763
Status published

Affected Products (8)

microsoft/365_apps
microsoft/excel
microsoft/office
microsoft/office_long_term_servicing_channel
microsoft/office_long_term_servicing_channel
microsoft/office_long_term_servicing_channel
microsoft/office_long_term_servicing_channel
microsoft/office_online_server < 16.0.10417.20010

Timeline

Published May 13, 2025
Tracked Since Feb 18, 2026