CVE-2025-54899

High

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

secure@microsoft.com·CWE-590·Published 2025-09-09

CVSS

7.8

EPSS

0.01

KEV

Exploits

cve.orgen

113 chars

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

NVDen

113 chars

Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9