high8.4Public exploit code
CVE-2025-47957
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)2025-06-20 · local · windows
Impact
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Office Long Term Servicing Channel | Versions 2021, 2024 |