{"id":"CVE-2025-26642","state":"PUBLISHED","title":"Microsoft Office Remote Code Execution Vulnerability","description":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.","publishedAt":"2025-04-08T17:23:45.434Z","updatedAt":"2026-08-10T15:12:41.124Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft 365 Apps for Enterprise","Microsoft Microsoft Access 2016","Microsoft Microsoft Access 2016 (32-bit edition)","Microsoft Microsoft Excel 2016","Microsoft Microsoft Office 2016","Microsoft Microsoft Office 2019","Microsoft Microsoft Office LTSC 2021","Microsoft Microsoft Office LTSC 2024","Microsoft Microsoft Office LTSC for Mac 2021","Microsoft Microsoft Office LTSC for Mac 2024","Microsoft Microsoft SharePoint Server 2019","Microsoft Office Online Server"],"affected":[{"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016 (32-bit edition)","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Excel 2016","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2019","versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10417.20003","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Office Online Server","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.10417.20003","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642"],"weaknesses":["CWE-125","CWE-190"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/26xxx/CVE-2025-26642.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-26642","state":"PUBLISHED","datePublished":"2025-04-08T17:23:45.434Z","dateUpdated":"2026-08-10T15:12:41.124Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2025-02-12T19:23:29.269Z"},"containers":{"cna":{"title":"Microsoft Office Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally."}],"affected":[{"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016 (32-bit edition)","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Excel 2016","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5495.1000","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2019","versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.96.25041326","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10417.20003","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Office Online Server","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.10417.20003","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26642","name":"Microsoft Office Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125: Out-of-bounds Read","lang":"en-US","type":"CWE"},{"cweId":"CWE-190","description":"CWE-190: Integer Overflow or Wraparound","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-08-10T15:12:41.124Z"},"datePublic":"2025-04-08T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*","versionStartIncluding":"16.0.0.0","versionEndExcluding":"16.0.10417.20003"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.10417.20003"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.96.25041326"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.96.25041326"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:*","versionStartIncluding":"16.0.0.0","versionEndExcluding":"16.0.5495.1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x86:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5495.1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5495.1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5495.1000"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-08T20:13:11.027447Z","id":"CVE-2025-26642","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-08T20:15:49.873Z"}}]}}}