PT-2025-32858 · Microsoft · Office Word

Haifei Li · Published 2025-08-12 · Updated 2025-10-14 · CVE-2025-53784

Positive Technologies · (AI Summary)

CVSS v3.1

8.4

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office Word (affected versions not specified)

Description A use-after-free condition exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. This can occur when opening a specially crafted document. Multiple reports indicate this issue is part of a series of use-after-free flaws addressed in a recent Microsoft patch released in August 2025, alongside fixes for over 100 vulnerabilities affecting Windows and Office. Some of these vulnerabilities are reportedly being exploited in the wild. The issue allows malicious code execution upon opening a compromised document.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-09748

CVE-2025-53784

Affected Products

Office Word

References · 12

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53784 · Security Note
• https://bdu.fstec.ru/vul/2025-09748 · Security Note
• https://twitter.com/CVEnew/status/1955322624814326246 · Twitter Post
• https://twitter.com/windowsforum/status/1955344445580124171 · Twitter Post
• https://twitter.com/HaifeiLi/status/1955397785299325151 · Twitter Post
• https://roboshadow.com/blog/patch-tuesday-august-2025?rid=socialpost · Reddit Post
• https://t.me/purp_sec/1027 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1955347431953998220 · Twitter Post
• https://t.me/CVEtracker/29811 · Telegram Post
• https://twitter.com/HaifeiLi/status/1978214185566916642 · Twitter Post
• https://twitter.com/CTI131/status/1956293781315346886 · Twitter Post