Lucene search
K

📄 Microsoft Excel Remote Code Execution

🗓️ 12 Jun 2025 00:00:00Reported by nu11secur1tyType 
packetstorm
 packetstorm
🔗 packetstorm.news👁 90 Views

Microsoft Excel vulnerability enables remote code execution via a malicious DOCX file, risking full system compromise.

Related
Code
# Titles: Microsoft Excel Local Code Execution Vulnerability
    # Author: nu11secur1ty
    # Date: 06/09/2025
    # Vendor: Microsoft
    # Software: https://www.microsoft.com/en/microsoft-365/excel?market=af
    # Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27751
    # CVE-2025-27751
    
    ## Description:
    The attacker can trick any user into opening and executing their code by
    sending a malicious DOCX file via email or a streaming server.
    After the execution of the victim, his machine can be infected or even
    worse than ever; this could be the end of his Windows machine!
    
    STATUS: HIGH-CRITICAL Vulnerability
    
    
    [+]Exploit:
    
    ```
    Sub hello()
    Dim Program As String
    Dim TaskID As Double
    On Error Resume Next
    ---------------------------------------
    Program = "WRITE YOUR OWN EXPLOIT HERE"
    TaskID = ...YOUR TASK HERE...
    ---------------------------------------
    If Err <> 0 Then
    MsgBox "Can't start " & Program
    End If
    End Sub
    ```
    
    # Reproduce:
    [href](https://www.youtube.com/watch?v=ArI0ZeChYE4)
    
    # Buy an exploit only:
    [href](https://satoshidisk.com/pay/COb5oS)
    
    # Time spent:
    00:35:00

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Jun 2025 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 3.17.8
EPSS0.01391
SSVC
90