CVE-2025-26629
Published: 11 March 2025
Description
An adversary may rely upon a user opening a malicious file in order to gain execution.
Security Summary
CVE-2025-26629 is a use-after-free vulnerability (CWE-416) affecting Microsoft Office. Published on 2025-03-11, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high impact with local attack vector, low attack complexity, no privileges required, and user interaction needed.
An unauthorized attacker with local access can exploit this flaw by convincing a user to open a malicious Office document or file. Successful exploitation enables arbitrary code execution in the context of the Office process, granting high-impact control over confidentiality, integrity, and availability.
The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26629 provides guidance on mitigation, including available patches and workarounds.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Use-after-free in Microsoft Office enables arbitrary code execution via malicious document opened by user, directly mapping to Exploitation for Client Execution (T1203) and User Execution via Malicious File (T1204.002).