| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2025-53784 | Microsoft Word Remote Code Execution Vulnerability | Microsoft Office, Microsoft 365 | Critical | 01-09-2025 |
Technical Information
The unauthorized attacker can exploit a use-after-free vulnerability in Microsoft Word through the Preview Pane attack vector, enabling arbitrary code execution locally even though the attack is initiated remotely.
Patch release date: Aug 12, 2025
Further information on this vulnerability is available at : CVE-2025-53784
Affected Software
Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office LTSC for Mac 2024