Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-59240

No fix known EPSS <1%CVSS 5.5

Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Published 2025-11-11 · CVE record · OSV

Products: Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024