high7.8Public exploit code
CVE-2025-27751
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Excel Use After Free - Local Code Execution2025-06-15 · local · windows
Impact
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Excel | Version 2016 |
| Microsoft | Office | Version 2019 |
| Microsoft | Office Long Term Servicing Channel | Versions 2021, 2024 |
| Microsoft | Office Online Server | All versions |