CVE-2025-21381

CVE-2025-21381 is a Remote Code Execution vulnerability in Microsoft Excel. Published on 2025-02-11, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-822 and NVD-CWE-noinfo.

The vulnerability can be exploited by an attacker with local access who tricks a user into performing an action, such as opening a malicious Excel file, given the low attack complexity and requirement for user interaction but no privileges. Successful exploitation enables remote code execution in the context of the user, resulting in high impacts to confidentiality, integrity, and availability.

Mitigation details are available in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21381.