CVE-2025-59240

—

CVSS 3.1

5.5 medium

EPSS

<1%p46

Published

Nov 11, 2025 (Nov 11, 2025)

Modified

Jun 17, 2026

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Vendors: microsoft
Products: 365 apps, excel, office, office long term servicing channel
Weakness: CWE-200
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.