This vulnerability (CVE-2025-62552) is a relative path traversal issue classified under CWE-23 in Microsoft Office Access, part of Microsoft 365 Apps for Enterprise version 16.0.1. It enables an unauthorized attacker to execute code locally by manipulating file paths. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction needed. The impact includes high confidentiality, integrity, and availability impacts. The vulnerability is not related to a cloud service and no known exploits are reported in the wild. A patch is available to remediate this vulnerability.

Successful exploitation allows an attacker with local access and requiring user interaction to execute arbitrary code on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system.

A patch is available for this vulnerability and should be applied promptly to affected versions of Microsoft 365 Apps for Enterprise (version 16.0.1). No additional vendor advisory details were provided, so check Microsoft’s official security updates for the exact patch. Since this is not a cloud service, remediation depends on applying the update on client systems.