{"id":"CVE-2025-59232","state":"PUBLISHED","title":"Microsoft Excel Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","publishedAt":"2025-10-14T17:01:40.739Z","updatedAt":"2026-02-22T17:25:59.076Z","severity":{"score":7.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft 365 Apps for Enterprise","Microsoft Microsoft Access 2016","Microsoft Microsoft Access 2016 (32-bit edition)","Microsoft Microsoft Excel 2016","Microsoft Microsoft Office 2019","Microsoft Microsoft Office LTSC 2021","Microsoft Microsoft Office LTSC 2024","Microsoft Microsoft Office LTSC for Mac 2021","Microsoft Microsoft Office LTSC for Mac 2024","Microsoft Microsoft SharePoint Enterprise Server 2016","Microsoft Microsoft SharePoint Server 2019","Microsoft Office Online Server"],"affected":[{"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016 (32-bit edition)","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Excel 2016","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2019","versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.102.25101223","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.102.25101223","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10417.20059","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Office Online Server","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.10417.20059","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59232"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/59xxx/CVE-2025-59232.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-59232","state":"PUBLISHED","datePublished":"2025-10-14T17:01:40.739Z","dateUpdated":"2026-02-22T17:25:59.076Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2025-09-11T00:32:30.952Z"},"containers":{"cna":{"title":"Microsoft Excel Information Disclosure Vulnerability","descriptions":[{"lang":"en-US","value":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally."}],"affected":[{"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Access 2016 (32-bit edition)","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Excel 2016","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office 2019","versions":[{"version":"19.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"https://aka.ms/OfficeSecurityReleases","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2021","versions":[{"version":"16.0.1","status":"affected","lessThan":"16.102.25101223","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Office LTSC for Mac 2024","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.102.25101223","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft SharePoint Enterprise Server 2016","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.5522.1000","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Microsoft SharePoint Server 2019","versions":[{"version":"16.0.0","status":"affected","lessThan":"16.0.10417.20059","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Office Online Server","versions":[{"version":"16.0.0.0","status":"affected","lessThan":"16.0.10417.20059","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59232","name":"Microsoft Excel Information Disclosure Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.1,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125: Out-of-bounds Read","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-02-22T17:25:59.076Z"},"datePublic":"2025-10-14T14:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*","versionStartIncluding":"16.0.0.0","versionEndExcluding":"16.0.10417.20059"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5522.1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.10417.20059"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"16.102.25101223"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.1","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"https://aka.ms/OfficeSecurityReleases"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.102.25101223"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:*","versionStartIncluding":"16.0.0.0","versionEndExcluding":"16.0.5522.1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5522.1000"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.0.5522.1000"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-14T18:54:33.864168Z","id":"CVE-2025-59232","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-14T18:54:43.487Z"}}]}}}