excel rce

Microsoft’s CVE title and the CVSS Attack Vector are answering two different — but complementary — questions: the CVE headline “Remote Code Execution” signals attacker origin and impact, while the CVSS Attack Vector value AV:L (Local) documents where the vulnerable code is executed at the moment...

Microsoft’s advisory for CVE-2025-62556 labels the issue as a Microsoft Excel Remote Code Execution vulnerability, yet the published CVSS vector shows an Attack Vector of Local (AV:L) — a seemingly contradictory pairing that, on closer inspection, reflects two different ways of answering two...