| Reporter | Title | Published | Views | Family All 27 |
|---|---|---|---|---|
| CVE-2025-27751 | 8 Apr 202516:14 | – | circl | |
| Microsoft Office 资源管理错误漏洞 | 8 Apr 202500:00 | – | cnnvd | |
| Microsoft Excel Code Execution Vulnerability (CNVD-2025-10609) | 9 Apr 202500:00 | – | cnvd | |
| CVE-2025-27751 | 8 Apr 202517:23 | – | cve | |
| CVE-2025-27751 Microsoft Excel Remote Code Execution Vulnerability | 8 Apr 202517:23 | – | cvelist | |
| Microsoft Excel Use After Free - Local Code Execution | 15 Jun 202500:00 | – | exploitdb | |
| Microsoft Excel LTSC 2024 - Remote Code Execution (RCE) | 20 Jun 202500:00 | – | exploitdb | |
| EUVD-2025-10135 | 3 Oct 202520:07 | – | euvd | |
| Description of the security update for Office Online Server: April 8, 2025 (KB5002699) | 8 Apr 202507:00 | – | mskb | |
| Description of the security update for Excel 2016: April 8, 2025 (KB5002704) | 8 Apr 202507:00 | – | mskb |
# Titles: Microsoft Excel Local Code Execution Vulnerability
# Author: nu11secur1ty
# Date: 06/09/2025
# Vendor: Microsoft
# Software: https://www.microsoft.com/en/microsoft-365/excel?market=af
# Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27751
# CVE-2025-27751
## Description:
The attacker can trick any user into opening and executing their code by
sending a malicious DOCX file via email or a streaming server.
After the execution of the victim, his machine can be infected or even
worse than ever; this could be the end of his Windows machine!
STATUS: HIGH-CRITICAL Vulnerability
[+]Exploit:
```
Sub hello()
Dim Program As String
Dim TaskID As Double
On Error Resume Next
---------------------------------------
Program = "WRITE YOUR OWN EXPLOIT HERE"
TaskID = ...YOUR TASK HERE...
---------------------------------------
If Err <> 0 Then
MsgBox "Can't start " & Program
End If
End Sub
```
# Reproduce:
[href](https://www.youtube.com/watch?v=ArI0ZeChYE4)
# Buy an exploit only:
[href](https://satoshidisk.com/pay/COb5oS)
# Time spent:
00:35:00Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation