Home Microsoft CVE-2025-24075
Back to Microsoft

CVE-2025-24075

Target: Office - Excel

Microsoft CVSS 7.8 Updated March 10, 2026
Threat Level HIGH

Executive Risk Summary

"A stack-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally, potentially leading to system compromise. This vulnerability poses a significant risk as it can be exploited to gain control of affected systems."

Operational Audit Arsenal

Target Type Application
Target Asset Microsoft Office Excel
Standard Path Local System
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Microsoft Office Excel (Application)
$Target = "Microsoft Office Excel"
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Filter $Target -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Required
Service Disruption

Moderate

Internal Work Notes

Recommend immediate patching of Microsoft Office Excel to mitigate the risk of code execution by unauthorized attackers.

Intelligence Sources

Scope of Impact

Office (Version 2019) Office Long Term Servicing Channel (Version 2024) Excel (Version 2016) 365 Apps Office Online Server Office Long Term Servicing Channel (Version 2021)

Original NVD Description

"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally."

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.