high8.4
CVE-2025-49697
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Impact
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | 365 Copilot | All versions |
| Microsoft | Office | Versions 2016, 2019 |
| Microsoft | Office Long Term Servicing Channel | Versions 2021, 2024 |
| Microsoft | Office Online Server | before 16.0.10417.20027 |