CVE-2025-55243: Microsoft OfficePLUS · Information Exposure
Affects Microsoft OfficePLUSSource CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 25 Oct 2026, 19:02 UTC
- EPSS
- 1.1% chance of exploitation in 30 days – higher than 66% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:CExploitation evidence
Disclosed: evidence found.
CVE published 9 Sep 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Microsoft Microsoft OfficePLUS | Affected
| Fixed in– |
AI-suggested
1. Monitor Microsoft’s official channels closely for the release of security patches addressing CVE-2025-55243 and apply them immediately upon availability. 2. Until patches are released, restrict network access to Microsoft OfficePLUS services using firewalls and network segmentation to limit exposure to untrusted networks. 3. Implement strict network monitoring and intrusion detection systems to identify unusual traffic patterns indicative of exploitation attempts. 4. Employ encryption for data in transit and at rest to reduce the risk of sensitive information leakage. 5. Conduct regular security awareness training to help users recognize potential spoofing or phishing attempts that may leverage exposed information. 6. Review and tighten access controls and permissions within Microsoft OfficePLUS environments to minimize data exposure. 7. Consider deploying endpoint detection and response (EDR) solutions to detect and respond to suspicious activities related to this vulnerability. 8. Maintain comprehensive logging and audit trails to facilitate incident investigation if exploitation is suspected.
Description
Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network.