| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2025-62199 | Microsoft Office Remote Code Execution Vulnerability | Microsoft Office, Microsoft 365 | Critical | 06-01-2026 |
Technical Information
The attacker achieves arbitrary code execution by exploiting use-after-free flaw which requires the adversary to send and convince the user to open the malicious document.
Patch release date: Nov 11, 2025
Further information on this vulnerability is available at : CVE-2025-62199
Affected Software
Microsoft Office 2016 (32-bit edition),Microsoft Office 2016 (64-bit edition),
Microsoft Office LTSC 2021 for 32-bit editions,
Microsoft Office LTSC 2021 for 64-bit editions,
Microsoft Office LTSC 2024 for 32-bit editions,
Microsoft Office LTSC 2024 for 64-bit editions,
Microsoft Office for Android,
Microsoft 365 Apps for Enterprise for 32-bit Systems,
Microsoft 365 Apps for Enterprise for 64-bit Systems,
Microsoft Office LTSC for Mac 2021,
Microsoft Office LTSC for Mac 2024