Home Microsoft CVE-2025-24083
Back to Microsoft

CVE-2025-24083

Target: Microsoft Office - Core

Microsoft CVSS 7.8 Updated March 10, 2026
Threat Level HIGH

Executive Risk Summary

"A vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally through an untrusted pointer dereference. This vulnerability poses a significant risk as it can be exploited to gain control over affected systems, potentially leading to data breaches or malware distribution."

Operational Audit Arsenal

Target Type Software
Target Asset Microsoft Office
Standard Path Installed on user workstations and servers
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Microsoft Office (Software)
$Target = "Microsoft Office"
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Filter $Target -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Required
Service Disruption

Low to Moderate

Internal Work Notes

Recommend immediate patching of Microsoft Office to mitigate the risk of code execution by unauthorized attackers.

Intelligence Sources

Scope of Impact

Office (Version 2019) Office (Version 2016) Office Long Term Servicing Channel (Version 2024) 365 Apps Office Long Term Servicing Channel (Version 2021)

Original NVD Description

"Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally."

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.