CVE-2025-27744: Microsoft Office

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Improper access control in Microsoft Office allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Office: version 2016 only

Published 2025-04-08. Last modified 2026-06-17.