Main Vulnerability Database Vulnerabilities #VU114039

Incorrect Conversion between Numeric Types in Microsoft products - CVE-2025-53733

Published: August 13, 2025

Vulnerability identifier: #VU114039

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-53733

CWE-ID: CWE-681

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to incorrect conversion between numeric types in Microsoft Word. A remote attacker can execute arbitrary code on the target system.

Affected software

Microsoft 365 Apps for Enterprise
Microsoft Word
Microsoft Office
Microsoft SharePoint Enterprise Server
Microsoft SharePoint Server
Microsoft Office LTSC

How to mitigate CVE-2025-53733

Install updates from vendor's website.

External References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53733

Related Security Bulletins