CVE-2025-55243

Katalog CVE

CVSS 7.5 · High EPSS 1,1%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada microsoft officeplus. Skor CVSS 3.1 7.5 (High) menurut microsoft.com.

Deskripsi (NVD)

Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network.

Rincian

Terbit di NVD

9 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber microsoft.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55243 advisory vendor