Out-of-bounds read in Microsoft products - CVE-2025-53736
Published: August 13, 2025
Vulnerability identifier: #VU114038
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-53736
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in Microsoft Word. A local attacker can trigger an out-of-bounds read error and read contents of memory on the system.
Affected software
Microsoft 365 Apps for Enterprise
Microsoft Word
Microsoft Office
Microsoft SharePoint Server
Microsoft Office LTSC
Microsoft Word
Microsoft Office
Microsoft SharePoint Server
Microsoft Office LTSC
How to mitigate CVE-2025-53736
Install updates from vendor's website.