CVE-2025-21402: Microsoft Office

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Microsoft Office OneNote Remote Code Execution Vulnerability

Affected products

• Microsoft Office: version 2024 only
• Microsoft Office Long Term Servicing Channel: version 2021 only
• Microsoft Onenote: affected versions not specified

Published 2025-01-14. Last modified 2026-06-17.