high7.8
CVE-2025-54906
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.
Impact
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Office | Versions 2016, 2019 |
| Microsoft | Office Long Term Servicing Channel | Versions 2021, 2024 |
| Microsoft | Sharepoint Server | Versions 2016, 2019 |