Microsoft disclosed multiple Office and Excel remote code execution flaws

Microsoft published security advisories for several remote code execution vulnerabilities affecting Microsoft Office and Microsoft Excel, including CVE-2025-24057, CVE-2025-24075, and CVE-2025-47162. The issues were listed in the Microsoft Security Update Guide as Office-family flaws that could allow arbitrary code execution if successfully exploited.

The disclosures indicate that the affected attack surface spans both the broader Office suite and Excel specifically, underscoring continued risk from malicious documents and content processed by productivity software. Organizations using Microsoft Office should prioritize review of the relevant advisories and deployment of associated security updates for the affected products tied to these CVEs.