AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2025-49696.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 8.4No severity score in this snapshot.
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSMicrosoft vendor recordModified Jul 15, 2025

Disclosure summary

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Source-reported weakness categories

CWE-125, CWE-122

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

Microsoft Security Updates (CVRF) · 2025-Jul

Open original source · Updated Jul 15, 2025

Microsoft Office Remote Code Execution Vulnerability

Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.

Microsoft maximum product score: 8.4

VendorProduct / associationVersion / bounds
Microsoft update guideMicrosoft Office 2019 for 32-bit editions (MSRC status code 3)
Microsoft update guideMicrosoft Office 2019 for 64-bit editions (MSRC status code 3)
Microsoft update guideMicrosoft 365 Apps for Enterprise for 32-bit Systems (MSRC status code 3)
Microsoft update guideMicrosoft 365 Apps for Enterprise for 64-bit Systems (MSRC status code 3)
Microsoft update guideMicrosoft Office LTSC for Mac 2021 (MSRC status code 3)
Microsoft update guideMicrosoft Office LTSC 2021 for 64-bit editions (MSRC status code 3)
Microsoft update guideMicrosoft Office LTSC 2021 for 32-bit editions (MSRC status code 3)
Microsoft update guideMicrosoft Office for Android (MSRC status code 3)
Microsoft update guideMicrosoft Office LTSC 2024 for 32-bit editions (MSRC status code 3)
Microsoft update guideMicrosoft Office LTSC 2024 for 64-bit editions (MSRC status code 3)
Microsoft update guideMicrosoft Office LTSC for Mac 2024 (MSRC status code 3)
Microsoft update guideMicrosoft Office 2016 (32-bit edition) (MSRC status code 3)
Microsoft update guideMicrosoft Office 2016 (64-bit edition) (MSRC status code 3)

Vendor remediation references

  • Click to Run · build https://aka.ms/OfficeSecurityReleases · product IDs 11573, 11574, 11762, 11763, 11952, 11953, 12420, 12421
  • Vendor guidance · product IDs 11573, 11574, 11762, 11763, 11952, 11953, 12420, 12421
  • Release Notes · build 16.99.25071321 · product IDs 11951
  • Vendor guidance · product IDs 11951
  • Release Notes · build 16.0.19029.20000 · product IDs 12155
  • Vendor guidance · product IDs 12155
  • Release Notes · build 16.99.25071321 · product IDs 12440
  • Vendor guidance · product IDs 12440
  • 5002742 · build 16.0.5508.1001 · product IDs 10753, 10754
  • Vendor guidance · product IDs 10753, 10754

Original records & references

PUBLISHED 2025-07-08T03:00:00-04:00
MODIFIED 2025-07-15T03:00:00-04:00
INGESTED 2026-10-08T12:45:49-04:00