CVE-2025-62555
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- Score
- CVSS 3.1 7.0 High
- Status
- Analyzed - secure@microsoft.com
- Published
- 2025-12-09
- Last modified
- 2026-10-07
- Weaknesses
- CWE-416
Affected products
- 365 Apps (Microsoft)
- Office (Microsoft)
- Office 2019 (Microsoft)
- Office 2021 (Microsoft)
- Office 2024 (Microsoft)
- Office Long Term Servicing Channel (Microsoft)
- Office Macos 2021 (Microsoft)
- Office Macos 2024 (Microsoft)
- Sharepoint Server (Microsoft)
- Sharepoint Server 2016 (Microsoft)
- Sharepoint Server 2019 (Microsoft)
- Word (Microsoft)
- Word 2016 (Microsoft)
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62555
