cve 2025 62203

The tag cve 2025 62203 covers discussion of a Microsoft Excel vulnerability officially designated CVE-2025-62203. The vulnerability is labeled Remote Code Execution (RCE) by Microsoft, yet its CVSS vector records the Attack Vector as Local (AV:L). This apparent contradiction is explained by the difference between impact messaging—warning that an attacker can deliver a malicious workbook from off-host—and technical exploit mechanics, where the vulnerable code executes inside a local Excel process. The tag content focuses on clarifying this distinction for defenders and understanding the real-world exploit scenario.