Main Vulnerability Database Vulnerabilities #VU114047

Use of uninitialized resource in Microsoft products - CVE-2025-53759

Published: August 13, 2025

Vulnerability identifier: #VU114047

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-53759

CWE-ID: CWE-908

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to usage of uninitialized resources in Microsoft Excel. A remote attacker can trick a victim to open a specially crafted file, trigger uninitialized usage of resources and execute arbitrary code on the target system.

Affected software

Office Online Server
Microsoft 365 Apps for Enterprise
Microsoft Office
Microsoft Office LTSC

How to mitigate CVE-2025-53759

Install updates from vendor's website.

External References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53759

Related Security Bulletins