Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2025-59226 is a remote code execution vulnerability in Microsoft Office Visio (rated Important, CVSS 7.8).
1 version
Facts
- Microsoft id
CVE-2025-59226- Products
- Microsoft Office Visio
- Severity
- Important
- Impact
- Remote Code Execution
- CVSS
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Unlikely
- Customer action required
- Yes
- Release
- 2025-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-416: Use After Free
- MSRC revision
- 1.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2025-10-14:
Information published.
Microsoft says
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Mentioning the same Microsoft ids
Last updated