Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 5 products
| Date | Total | Labels |
|---|
| 2026-06-27 | 1 | General1 |
| 2026-06-29 | 2 | Disclosure1Patch1 |
| 2026-06-30 | 2 | Active Exploitation1Disclosure1 |
| 2026-07-06 | 1 | Disclosure1 |
| 2026-07-11 | 1 | Patch1 |
CVE-2025-60727: Microsoft 365 Apps RCE Vulnerability - by @SentinelOne https://www.sentinelone.com/vulnerability-database/cve-2025-60727/
Post summary
The notice merely references the CVE-2025-60727 RCE in Microsoft 365 Apps, pointing to a SentinelOne database entry without providing detailed technical or exploit information.
Vulnerabilidad RCE de Microsoft 365 explotada con archivo Excel malicioso Microsoft ha revelado una vulnerabilidad crítica de ejecución remota de código (CVE-2025-60727) en su ecosistema de Office https://blog.elhacker.net/2026/06/vulnerabilidad-rce-de-microsoft-365.html
Post summary
Microsoft disclosed that CVE-2025-60727, a critical RCE flaw in the Office 365 ecosystem, is actively being exploited through malicious Excel files.
Microsoft 365 Apps の RCE 脆弱性 CVE-2025-60727：細工された Excel ファイルとコード実行 https://iototsecnews.jp/2026/06/29/microsoft-365-apps-rce-vulnerability-lets-attackers-execute-code-via-malicious-excel-files/ Microsoft Office 製品に潜む脆弱性 CVE-2025-60727 は、Excel がファイルを処理する際にデータの長さやオフセット値を適切に検証しないことが原因で発生します。この検証不備により、割り当てられたバッファの境界外にあるメモリが読み込まれ、メモリ破損が引き起こされます。攻撃者が用意した不正なスプレッドシートを開くだけで、利用中のユーザーと同じ権限で任意のコードが実行されてしまう危険性があります。業務で多用される Excel のファイル解析メカニズムそのものに起因する問題であるため、影響範囲が広く注意が必要です。ご利用のチームは、ご注意ください。 #365Apps #CVE202560727 #Microsoft #Vulnerability
Post summary
The article discloses CVE‑2025‑60727, an Excel file parsing flaw that can cause RCE through buffer overflow; it provides technical details but no PoC, exploit, patch, or evidence of active exploitation.
Excelを開くだけでPC乗っ取り。 笑えない話だけど、これが現実。 CVE-2025-60727。 Microsoft Excelの境界外読み取り脆弱性。 影響範囲が地味に広い。 Microsoft 365 Apps Excel 2016 Office 2019 Office LTSC 2021/2024 Office Online Server 全部対象。 認証もいらない。 メール添付を開く、それだけ。 今すぐ更新プログラムを当てる。 Click-to-Runなら最新に保つ。 それだけで大半は防げる。
Post summary
The post announces the out‑of‑bounds read flaw in Microsoft Excel (CVE‑2025‑60727) and urges users to apply the latest patch or keep Click‑to‑Run updated.
One crafted Excel file, one click - CVE-2025-60727 turns Office file parsing into code execution. Patch now. https://intel.threadlinqs.com/threat/TL-2026-1205 #ThreatIntel #CVE_2025_60727 #Excel #Phishing https://t.co/wKswVg819t
Post summary
The tweet urges applying the patch for CVE-2025-60727, an RCE via crafted Excel files, but provides no PoC, code, or evidence of active exploitation.
📊 A critical RCE flaw (CVE-2025-60727) in Microsoft Excel lets attackers execute code just by tricking users into opening a malicious file, no auth or elevated privileges needed. Affects Microsoft 365 Apps, Excel 2016, Office 2019/LTSC 2021/2024. 🛡️ Microsoft's already patched it — update Office now and enforce Protected View on files from external sources.
Post summary
Microsoft Excel CVE-2025-60727 is a critical RCE flaw that has already been patched; users should update Office and enforce Protected View.
A critical RCE vulnerability (CVE-2025-60727) in Microsoft 365 Apps allows attackers to execute code via malicious Excel files. This flaw affects multiple Office versions and underscores the persistent threat of document-based attacks. Users are urged to apply security updates promptly to mitigate risks. #Microsoft365 #Excel #RCE #CyberSecurity #Phishing #SecurityUpdate https://thedailytechfeed.com/critical-rce-vulnerability-in-microsoft-365-apps-exploited-via-malicious-excel-files/
Post summary
The post announces a critical RCE flaw in Microsoft 365 Apps that can be triggered through malicious Excel files and urges users to install security updates.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | excel | 2016 | - | x64 |
| App | microsoft | excel | 2016 | - | x86 |
| App | microsoft | office | 2019 | - | x64 |
| App | microsoft | office | 2019 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | macos | - |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | macos | - |
| App | microsoft | office_online_server | - | - | - |