CVE-2025-21386

CVE-2025-21386 is a Remote Code Execution vulnerability in Microsoft Excel. Published on 2025-02-11, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is linked to CWE-416, with additional NVD-CWE-noinfo classification.

Exploitation requires local access to the target system, low attack complexity, no privileges from the attacker, and user interaction, such as opening a malicious Excel file. Successful exploitation allows an attacker to achieve high impacts on confidentiality, integrity, and availability, enabling remote code execution on the affected machine.

Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21386 details mitigation steps, including available patches through standard update channels.