Home Microsoft CVE-2025-21364
Back to Microsoft

CVE-2025-21364

Target: Office - Excel

Microsoft CVSS 7.8 Updated March 10, 2026
Threat Level HIGH

Executive Risk Summary

"A security feature bypass vulnerability exists in Microsoft Excel, which could allow an attacker to bypass security features. This vulnerability requires an attacker to convince a user to open a specially crafted Excel file."

Operational Audit Arsenal

Target Type Application
Target Asset Microsoft Excel
Standard Path User Workstations
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Microsoft Excel (Application)
$Target = "Microsoft Excel"
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Filter $Target -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Not Required
Service Disruption

Low

Internal Work Notes

Apply the latest security updates from Microsoft to mitigate the vulnerability.

Intelligence Sources

Scope of Impact

365 Apps Office Long Term Servicing Channel (Version 2024)

Original NVD Description

"Microsoft Excel Security Feature Bypass Vulnerability"

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.