CVE-2025-62554Patch(microsoft / 365_apps)

🚨 HIGH SEVERITY: CVE-2025-62554 (CVSS 8.4) Type confusion vulnerability in Microsoft Office enables unauthorized local code execution. No user interaction required. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/0f0ZWzO70X

🚨 CVE-2025-62554 : CRITICAL MICROSOFT OFFICE RCE ALERT 🚨 @Microsoft  A type confusion remote code execution vulnerability has been disclosed in Microsoft Office — the world’s most widely deployed enterprise productivity suite. Risk Severity: Critical (trending, ransomware-relevant, public PoC available) Impact: • Arbitrary code execution via malicious documents • Full compromise of user endpoints • Credential theft & lateral movement • Persistent access via Office add-ins/templates • Common initial access vector for ransomware & APTs Root Cause: CWE-843 (Type Confusion) Microsoft Office improperly validates embedded OLE object types. Malformed documents exploit incompatible object casting, corrupting memory and hijacking execution flow when Office parses document content. Attackers can: • Deliver malicious .docx, .xlsx, or .pptx files via phishing • Trigger memory corruption during OLE object parsing • Achieve code execution in winword.exe, excel.exe, or powerpnt.exe • Run payloads with victim user privileges • Pivot laterally across network shares and mapped drives Are You Affected? Vulnerable: • Office 2016 • Office 2019 • Microsoft 365 Apps (pre–Jan 2026 updates) Platforms: Windows & macOS Immediate Action Required: Update: Deploy January 2026 Office security updates immediately Mitigation: Quarantine external Office attachments; enable ASR rules blocking Office child processes Audit: Hunt for Office spawning PowerShell, rundll32, or executables from %TEMP% Office documents remain a Tier-0 ransomware delivery vector. Patch, restrict, and monitor aggressively. 🛡️ #microsoft #security #ostorlabCVE