CVE-2025-62552
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A relative path traversal vulnerability in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Risk Assessment
The risk involves potential local code execution by an attacker, which could lead to compromise of confidentiality, integrity, or availability of data on the victim's machine.
Recommendation
Update Microsoft Office Access to the latest version and apply the principle of least privilege for users. Also, avoid opening untrusted files.
Other vulnerabilities in Microsoft Office Access
See all- CVE-2026-94506Medium
An out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
- CVE-2026-105717High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105716High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105714High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105598High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105597High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105596High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105595High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105593High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105592High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

