Is CVE-2025-47164 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-47164 being exploited in the wild.

How severe is CVE-2025-47164?

High severity, with a CVSS score of 8.4, published 10 June 2025.

Which products and versions are affected?

Microsoft Office 2016, 2019, 2021, 2024, 365 Apps, Copilot.

Is there a fix for CVE-2025-47164?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-47164 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2025-47164?

Check whether you run Microsoft 365 Apps, Microsoft Office 2016, Microsoft Office 2019 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-47164: Microsoft Office use after free local code execution

CVE-2025-47164 · Severity: high · CVSS 8.4 · Published 2025-06-10

A vulnerability in Microsoft Office could allow an attacker to execute malicious code on a user's computer. This issue affects various versions of the productivity suite, including Office 2016 through 2024 and Microsoft 365 Apps. If exploited, an attacker could gain the same permissions as the local user, potentially leading to data theft, unauthorized system changes, or a total loss of system integrity.

Technologies: Microsoft 365 Apps, Microsoft Office 2016, Microsoft Office 2019, Microsoft Office 2021, Microsoft Office 2024. Vendors: Microsoft.

Quick answers

Is CVE-2025-47164 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-47164 being exploited in the wild.
How severe is CVE-2025-47164?: High severity, with a CVSS score of 8.4, published 10 June 2025.
Which products and versions are affected?: Microsoft Office 2016, 2019, 2021, 2024, 365 Apps, Copilot.
Is there a fix for CVE-2025-47164?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-47164 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2025-47164?: Check whether you run Microsoft 365 Apps, Microsoft Office 2016, Microsoft Office 2019 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is classified as a Use-After-Free (CWE-416) within Microsoft Office. It occurs when the application continues to use a pointer after the memory it points to has been freed, leading to memory corruption. An attacker can exploit this by running a specially crafted application locally on the target machine. Successful exploitation grants the attacker the ability to execute arbitrary code with the privileges of the logged-in user. The vulnerability affects multiple platforms including Windows, macOS, and Android versions of the Office suite.

Affected products

Microsoft Office 2016, 2019, 2021, 2024, 365 Apps, Copilot

Timeline

2025-06-10: disclosed: Initial disclosure by Microsoft and NVD publication.
2025-06-10: advisory: Microsoft released a vendor advisory (MSRC).

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47164

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.