CVE-2025-62199

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62199 · Vendor Advisory
• vicarius.io/vsociety/posts/cve-2025-62199-detect-microsoft-office-rce-vulnerability
• vicarius.io/vsociety/posts/cve-2025-62199-mitigate-microsoft-office-rce-vulnerability

365 copilot 的其他漏洞

• CVE-2026-85881高危 8.0Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
• CVE-2026-58617严重 9.8Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-42831高危 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-41614中危 6.2Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-41100中危 4.4Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.