CVE-2025-62554

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-62554

CVE-2025-62554 is a Microsoft Office remote code execution vulnerability reported as a type confusion in Office components. Multiple connected sources (MSRC, CNVD, EUVD, CNNVD, Krebs) describe it as enabling code execution on affected systems, with Microsoft noting the issue in Office products an...

Description of the security update for Office 2016: December 9, 2025 (KB5002819)

Description of the security update for Office 2016: December 9, 2025 KB5002819 Summary This security update resolves a Microsoft Office Remote Code Execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...