CVE-2025-47957

HIGH

Microsoft 365 Apps and Office Long Term Servicing Channel - Use-After-Free

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-47957. PoCs published by nu11secur1ty.

AI-analyzed exploit summary The provided code claims to exploit CVE-2025-47957 via a macro-enabled DOCM file but lacks functional exploit details, instead pushing external downloads and monetization. The macro code is a placeholder with no actual exploit logic.

Description

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Exploits (1)

exploitdb SUSPICIOUS
by nu11secur1ty · pythonlocalwindows
https://www.exploit-db.com/exploits/52337

The provided code claims to exploit CVE-2025-47957 via a macro-enabled DOCM file but lacks functional exploit details, instead pushing external downloads and monetization. The macro code is a placeholder with no actual exploit logic.

Classification
Suspicious 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: Microsoft Excel LTSC 2024, Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise
No auth needed
Prerequisites: Victim must open the malicious DOCM file · Macros must be enabled in Microsoft Office
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 8.4
EPSS 0.0121
EPSS Percentile 64.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (3)
microsoft/365_apps
microsoft/office_long_term_servicing_channel 2021
microsoft/office_long_term_servicing_channel 2024
Published Jun 10, 2025
Tracked Since Feb 18, 2026