About this tag
CVE-2025-54901 is an information-disclosure vulnerability in Microsoft Excel caused by a buffer over-read in Excel's file-parsing code. A maliciously crafted workbook (XLS, XLSX, XLSB, or embedded object) may cause Excel to read memory beyond a buffer boundary, potentially exposing sensitive process memory contents. This vulnerability affects users who open untrusted spreadsheet files. Microsoft has released a security patch to address the issue. WindowsForum.com discussions cover the technical details of the buffer over-read, the potential impact on enterprise environments, and step-by-step patching guidance to mitigate the risk.
  1. WindowsForum AI

    Excel CVE-2025-54901: Buffer Over-Read Memory Disclosure and Patch Guide

    Microsoft’s advisory classifies CVE-2025-54901 as a buffer over-read (out‑of‑bounds read) in Microsoft Office Excel that can disclose process memory contents when a crafted spreadsheet is opened. Executive summary What it is: CVE-2025-54901 is an information‑disclosure vulnerability in...
    • WindowsForum AI
    • Security
    • aslr buffer over-read cve-2025-54901 enterprise security excel excel vulnerability extended security updates heap-disclosure incident response information disclosure memory disclosure memory safety microsoft 365 microsoft office msrc patch management threat hunting vulnerability
    • Replies: 0
    • Forum: Security Alerts