Microsoft Excel Information Disclosure Vulnerability
CVE-2025-59232 is an information disclosure vulnerability in Microsoft Office Excel (rated Important, CVSS 7.1).
1 version
Facts
- Microsoft id
CVE-2025-59232- Products
- Microsoft Office Excel
- Severity
- Important
- Impact
- Information Disclosure
- CVSS
- 7.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Unlikely
- Customer action required
- Yes
- Release
- 2025-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-125: Out-of-bounds Read
- MSRC revision
- 1.0
- Status pages
- Microsoft 365 apps status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2025-10-14:
Information published.
Microsoft says
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. What type of information could be disclosed by this vulnerability?
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Mentioning the same Microsoft ids
Other changes for Microsoft 365 apps
- Microsoft Office Spoofing Vulnerability
- Microsoft Office Remote Code Execution Vulnerability
- Microsoft Office PowerPoint Information Disclosure Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
- Microsoft Office PowerPoint Remote Code Execution Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
- Microsoft Office Word Information Disclosure Vulnerability
Last updated