Integer overflow in Microsoft products - CVE-2025-26642

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in Microsoft Office. A remote attacker can trick a victim to download and open a specially crafted file, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2025-26642

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-26642

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Office