Microsoft Office Denial of Service Vulnerability
CVE-2025-59229 is a denial of service vulnerability in Microsoft Office (rated Important, CVSS 5.5).
1 version
Facts
- Microsoft id
CVE-2025-59229- Products
- Microsoft Office
- Severity
- Important
- Impact
- Denial of Service
- CVSS
- 5.5
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Unlikely
- Customer action required
- Yes
- Release
- 2025-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-248: Uncaught Exception
- MSRC revision
- 1.0
- Status pages
- Microsoft 365 apps status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2025-10-14:
Information published.
Microsoft says
Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally. According to the CVSS metric, user interaction is required (UI:R).
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Mentioning the same Microsoft ids
Other changes for Microsoft 365 apps
- Microsoft Office Spoofing Vulnerability
- Microsoft Office Remote Code Execution Vulnerability
- Microsoft Office PowerPoint Information Disclosure Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
- Microsoft Office PowerPoint Remote Code Execution Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
Last updated