CVE-2025-30381

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel versions 2016 through 2024 Microsoft Office Excel version 365

Description The issue is an out-of-bounds read in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This can enable remote attackers to execute arbitrary code and affect the system. The vulnerability exists due to the release of an invalid pointer or reference in Microsoft Excel.

Recommendations For Microsoft Office Excel versions 2016 through 2024, apply the patch in the May 2025 update: KB5002695. For Microsoft Office Excel version 365, apply the patch in the May 2025 update: KB5002695. As a temporary workaround, consider restricting the use of Microsoft Excel until a patch is applied.