Microsoft 365 Apps RCE Vulnerability Exploited Using a Malicious Excel File

Cybersecuritynews •Abinaya • June 29, 2026

Microsoft has disclosed a critical remote code execution vulnerability in its Office ecosystem that can be exploited through a malicious Excel file. The vulnerability, tracked as CVE-2025-60727, affects multiple versions of Microsoft Office and underscores the continued risk posed by document-based attack techniques commonly used in phishing campaigns. The issue is classified as an out-of-bounds […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Microsoft 365 Apps Exploited via Malicious Excel Files A newly disclosed remote code execution (RCE) vulnerability, tracked as CVE-2025-60727, affects Microsoft 365 Apps, allowing attackers to execute arbitrary code through malicious Excel documents. This vulnerability arises from an out-of-bounds read condition in Excel's file-parsing mechanism, leading to potential memory corruption. It impacts multiple versions of Microsoft Office and is particularly concerning in enterprise environments where document-based attacks are common. The vulnerability was publicly disclosed on June 29, 2026, and highlights the ongoing risks associated with phishing campaigns that utilize malicious documents. Organizations are urged to assess their defenses against this exploit vector. 2 sources 69

Extracted Entities

Microsoft 365 Apps RCE Vulnerability Exploited Using a Malicious Excel File

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (2)

Platforms (2)