CNNVD-202512-1183 Information

CNNVD ID

CNNVD-202512-1183

CVE-2025-62558

  • CNNVD Published: 2025-12-09

Description (Chinese)

Microsoft Word是美国微软(Microsoft)公司的一套Office套件中的文字处理软件。 Microsoft Word存在资源管理错误漏洞。攻击者利用该漏洞可以远程执行代码。攻击者利用该漏洞可以远程执行代码。以下产品和版本受到影响:Microsoft SharePoint Enterprise Server 2016,Microsoft SharePoint Server 2019,Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for 64-bit Systems,Microsoft Office LTSC for Mac 2021,Microsoft Office LTSC 2021 for 64-bit editions,Microsoft Office LTSC 2021 for 32-bit editions,Microsoft Office LTSC 2024 for 32-bit editions,Microsoft Office LTSC 2024 for 64-bit editions,Microsoft Office LTSC for Mac 2024,Microsoft Word 2016 (32-bit edition),Microsoft Word 2016 (64-bit edition)。

Description (English)

Microsoft Word is the word-processing software in an Office package of Microsoft (USA). Microsoft Word has an error in resource management. The attackers used the loophole to implement the code remotely. The attackers used the loophole to implement the code remotely. The following products and versions are affected: Microsoft SharePoint Enterprise Service 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit applications, Microsoft Office 2019 for 64-bit applications, Microsoft Apps for Enterprise 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office Ltd. 2021, Microsoft Office LTSC 2021 for 32-bit appointments, Microsoft Office LTSC for 32-bit Systems for 32-bit Systems, Microsoft 365 Apps for Enterprise for Services for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for 2021 for 64-bit assessments, Microsoft Office appointments for 2024, Microsoft OfficeLTSC for Service Order 2024-W.

Hazard Level

Medium

Vulnerability Type

资源管理错误

Affected Vendor

微软

Published

2025-12-09

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62558

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62558

Share on: