PT-2025-20993 · Microsoft · Office Excel

0X140Ce · Published 2025-05-13 · Updated 2025-07-15 · CVE-2025-30383

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel versions prior to May 2025 updates

Description: The issue is related to a type confusion flaw in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This enables remote attackers to execute arbitrary code and affect the system.

Recommendations: For versions prior to May 2025 updates, update to the latest version that includes the May 2025 updates to secure the environment. At the moment, there is no information about additional mitigation measures for this specific issue.

Fix

RCE

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2025-05620

CVE-2025-30383

Affected Products

Office Excel

References · 9

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30383 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05620 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30383 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30383 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/720999 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-30383 · Security Note
• https://twitter.com/ZeroPathLabs/status/1922463685206786260 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025051392 · Note
• https://twitter.com/CVEnew/status/1922339827107954768 · Twitter Post