CVE-2025-29792

—

CVSS 3.1

7.3 high

EPSS

1%p65

Published

Apr 8, 2025 (Apr 8, 2025)

Modified

Jun 17, 2026

Description

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Vendors: microsoft
Products: 365 apps, office, office long term servicing channel
Weakness: CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news3 stories

Microsoft's Patch Tuesday closes 72 vulnerabilities, including 5 zero

CyberScoopMay 13, 22:38 UTC · May 13, 2025Vulnerability in the wildCVE-2025-30397 CVE-2025-30400 CVE-2025-32701+14 CVEs

60

Microsoft patches zero-day actively exploited in string of ransomware attacks

CyberScoopApr 8, 21:22 UTC · Apr 8, 2025Ransomware in the wildCVE-2025-29824 CVE-2025-29792 CVE-2025-29793+3 CVEs1

60

Microsoft Patch Tuesday for April 2025 — Snort rules and prominent vulnerabilities

Cisco TalosApr 8, 18:53 UTC · Apr 8, 2025Vulnerability in the wildCVE-2025-27480 CVE-2025-27482 CVE-2025-26663+16 CVEs

60