| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2025-49698 | Microsoft Word Remote Code Execution Vulnerability | Microsoft Office, Microsoft 365 Apps, Microsoft Word | Critical | 04-08-2025 |
Technical Information
The attacker may exploit a use-after-free vulnerability in Microsoft Word to execute code locally, using the Preview Pane as an attack vector. To carry out the attack, the attacker must send a malicious file and convince the user to open it.
Patch release date: Jul 08, 2025
Further information on this vulnerability is available at : CVE-2025-49698
Affected Software
Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024,
Microsoft Word 2016 (32-bit edition),
Microsoft Word 2016 (64-bit edition)