CVE-2025-60728

Medium · 4.3

CVSS

4.3

EPSS

0.8%

Published

Nov 11, 2025

CISA due date

—

The record

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Ecosystem	Package	Introduced	Fixed