Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 4 products
| Date | Total | Labels |
|---|
| 2026-03-18 | 1 | Patch1 |
| 2026-03-19 | 1 | Active Exploitation1 |
Micropatches released for Microsoft Access Remote Code Execution Vulnerability (CVE-2025-62552) https://blog.0patch.com/2026/03/micropatches-released-for-microsoft.html https://t.co/Jtf8IOS74K
Post summary
The post announces that micro‑patches have been released to fix CVE-2025‑62552, a Remote Code Execution flaw in Microsoft Access, with details available on the linked blog.
🚨 HIGH Severity Alert CVE-2025-62552: Path traversal flaw in Microsoft Office Access (CVSS 7.8) enables unauthorized local code execution. User interaction required. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/teiAE0sOR2
Google warns iPhone users about a new exploit kit used by spyware vendors and suspected state actors to plant info-stealing malware. CISA adds CVE-2025-66376 affecting Synacor Zimbra Collabora to its Known Exploited Vulnerabilities Catalog due to active exploitation. Micropatches released for Microsoft Access remote code execution vulnerability (CVE-2025-62552) to prevent unauthorized code execution. Parse Server vulnerable to schema poisoning via prototype pollution (CVE-2026-32878), allowing attackers to bypass protections. Stay sharp. Stay secure. #NerdieNews #CyberSecurity #InfoSec #ThreatIntel #APT
Post summary
The post reports active exploitation of CVE-2025-66376 by CISA, notes a new exploit kit used by spyware vendors, and mentions micro‑patches for CVE-2025-62552 while providing technical details on several CVEs.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | access | 2016 | - | - |
| App | microsoft | office | 2019 | - | x64 |
| App | microsoft | office | 2019 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2021 | - | x86 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x64 |
| App | microsoft | office_long_term_servicing_channel | 2024 | - | x86 |