CVE-2025-53759
Published: 12 August 2025
Summary
CVE-2025-53759 is a high-severity Use of Uninitialized Resource (CWE-908) vulnerability in Microsoft Office Long Term Servicing Channel. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 22.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The vulnerability CVE-2025-53759 is a use of uninitialized resource weakness, tracked under CWE-908, that affects Microsoft Office Excel. It carries a CVSS 3.1 base score of 7.8 and permits an attacker to execute arbitrary code on an affected system.
An unauthorized attacker can exploit the flaw locally when a user opens a specially crafted file, requiring no privileges but some user interaction. Successful exploitation grants the attacker full control over confidentiality, integrity, and availability on the target system.
The Microsoft Security Response Center advisory at the referenced URL supplies official details and remediation guidance for the issue. The associated EPSS score has remained flat at a low value of 0.0104 with no material increase observed since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-24371
Vulnerability details
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.