Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
History

Tue, 08 Jul 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 08 Jul 2025 17:15:00 +0000

Type Values Removed Values Added
Description Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Title Microsoft Office Remote Code Execution Vulnerability
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2025-07-08T16:58:02.775Z

Updated: 2025-07-09T04:01:17.976Z

Reserved: 2025-06-09T19:59:44.875Z

Link: CVE-2025-49699

cve-icon Vulnrichment

Updated: 2025-07-08T19:17:44.043Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-07-08T17:15:56.590

Modified: 2025-07-10T13:18:53.830

Link: CVE-2025-49699

cve-icon Redhat

No data.