A critical untrusted pointer dereference vulnerability in Microsoft Excel poses a severe risk of local code execution if a user opens a malicious file.

This vulnerability is a pointer dereference flaw (CWE-822) triggered when the application processes a specially crafted file. Successful exploitation requires user interaction, but it allows an unauthorized local attacker to achieve full code execution.

Successful exploitation of this vulnerability can lead to a complete compromise of the affected system, including the theft of sensitive data, unauthorized user access, and potential lateral movement across the network. With a CVSS score of 7.8, this vulnerability is considered high severity, as it facilitates significant technical impact through local code execution.

Immediate Action: Apply the relevant security updates provided by Microsoft via the official update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62561.

Proactive Monitoring: Review endpoint security logs for unusual process spawning originating from the Excel application process.

Compensating Controls: Ensure that Protected View and Application Guard for Office are enabled to restrict the execution of untrusted or macro-enabled documents.

Public Exploit Available: No (exploit_available: false)

Given the potential for code execution and the wide distribution of the affected software, organizations should prioritize patching all systems running vulnerable versions of Microsoft Office. Administrators must ensure that the latest security updates are deployed across all enterprise endpoints to eliminate the risk of exploitation.