CVE-2025-62552

HighCVSS 7.8

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

47th percentile - higher than 47% of all known CVEs

Summary

A relative path traversal vulnerability in Microsoft Office Access allows an unauthorized attacker to execute code locally.

Risk Assessment

The risk involves potential local code execution by an attacker, which could lead to compromise of confidentiality, integrity, or availability of data on the victim's machine.

Recommendation

Update Microsoft Office Access to the latest version and apply the principle of least privilege for users. Also, avoid opening untrusted files.

Other vulnerabilities in Microsoft Office Access

See all

CVE-2026-69778High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69614High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69529High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69477High
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
CVE-2026-64920High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64919High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64914High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64912High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64908High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64906High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

Original NVD description (English source)

Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS