CVE-2025-21402Disclosure(microsoft / office)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Microsoft Office OneNote Remote Code Execution Vulnerability

microsoft CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21402

Weakness type (CWE)

CWE-641

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

office
office_long_term_servicing_channel
onenote

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

microsoft

Products

officeoffice_long_term_servicing_channelonenote

3 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://ift.tt/a9QOXL8

Full discourse1 post

Israel@f1tym1141d
Disclosure
CVE-2025-21402 | Microsoft Office/OneNote improper restriction of names for files and other resources (Nessus ID 214206) https://ift.tt/a9QOXL8 A vulnerability was found in Microsoft Office and OneNote and classified as critical. This impacts an unknown function. Such manipula…
Post summary
A new critical vulnerability (CVE-2025-21402) affecting Microsoft Office and OneNote has been discovered, involving improper name restrictions. No exploit, patch, or active exploitation details are provided.
000001.0K
974 followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	office	2024	macos	-
App	microsoft	office_long_term_servicing_channel	2021	macos	-
App	microsoft	onenote	-	macos	-

Explore more

Back to dashboard microsoft CVEs office vulnerabilities