CVE-2025-24083
Published: 11 March 2025
Summary
CVE-2025-24083 is a high-severity Untrusted Pointer Dereference (CWE-822) vulnerability in Microsoft Office Long Term Servicing Channel. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 43.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly mitigates the vulnerability by requiring timely identification, testing, and application of Microsoft patches for the untrusted pointer dereference flaw in Office.
Implements memory protection mechanisms such as ASLR, DEP, and stack canaries that prevent arbitrary code execution from untrusted pointer dereferences.
Deploys malicious code protection tools to scan and block malicious Office documents at entry points before user interaction enables exploitation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability in Microsoft Office is triggered by opening a malicious document and results in arbitrary code execution, directly enabling T1203 (Exploitation for Client Execution) and T1204.002 (Malicious File under User Execution).
NVD Description
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
Deeper analysisAI
CVE-2025-24083 is an untrusted pointer dereference vulnerability (CWE-822) in Microsoft Office. Published on 2025-03-11, it has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
An unauthorized attacker with local access can exploit this vulnerability through low-complexity attacks that require user interaction, such as opening a malicious Office document. Successful exploitation enables arbitrary code execution locally, granting high-impact control over confidentiality, integrity, and availability without privilege escalation.
Microsoft's update guide provides details on mitigation, available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24083.
Details
- CWE(s)