Overview
CVE-2025-59234 is a high-severity “use-after-free” vulnerability (CWE-416) in Microsoft Office that allows a local attacker to execute code. It affects Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps, Office for Mac (2021/2024), and Office for Android, with a CVSS 3.1 score of 7.8. Exploitation is considered less likely, and Microsoft has released official patches.
AFFECTED SYSTEMS
- Microsoft Office 2016 (32-bit and x64) versions 16.0.0 before 16.0.5522.1000
- Microsoft Office 2019 (32-bit and x64) versions 19.0.0 before latest security updates
- Microsoft 365 Apps for Enterprise (32-bit and x64) versions 16.0.1 before latest security updates…..
