CVE-2025-53733

Medienbericht

EPSS 0.5%
Veröffentlicht 12.08.2025 17:10:32
Zuletzt bearbeitet 18.08.2025 17:00:01
Erkennungen
Login

Microsoft Word Remote Code Execution Vulnerability

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 14 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ 365 Apps Version - SwEdition enterprise HwPlatform x64

Microsoft ≫ 365 Apps Version - SwEdition enterprise HwPlatform x86

Microsoft ≫ Office Version 2019 HwPlatform x64

Microsoft ≫ Office Version 2019 HwPlatform x86

Microsoft ≫ Office Long Term Servicing Channel Version 2021 SwPlatform - HwPlatform x64

Microsoft ≫ Office Long Term Servicing Channel Version 2021 SwPlatform - HwPlatform x86

Microsoft ≫ Office Long Term Servicing Channel Version 2021 SwPlatform macos

Microsoft ≫ Office Long Term Servicing Channel Version 2024 SwPlatform - HwPlatform x64

Microsoft ≫ Office Long Term Servicing Channel Version 2024 SwPlatform - HwPlatform x86

Microsoft ≫ Office Long Term Servicing Channel Version 2024 SwPlatform macos

Microsoft ≫ Sharepoint Enterprise Server Version 2016

Microsoft ≫ Sharepoint Server Version 2019

Microsoft ≫ Word Version 2016 HwPlatform x64

Microsoft ≫ Word Version 2016 HwPlatform x86

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.5%	0.393

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-681 Incorrect Conversion between Numeric Types

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

13.08.2025 09:07

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

13.08.2025 00:37

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53733

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-53733

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-53733

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-53733

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-53733