Microsoft 365 Apps RCE Vulnerability Lets Attackers Execute Code via Malicious Excel Files

Gbhackers •Divya • June 29, 2026

A newly disclosed remote code execution (RCE) vulnerability in Microsoft 365 Apps is raising concerns in enterprise environments. Attackers can exploit malicious Excel documents to execute arbitrary code on target systems. This vulnerability, tracked as CVE-2025-60727, arises from an out-of-bounds read condition (CWE-125) in Microsoft Excel’s file-parsing mechanism, allowing threat actors to trigger memory corruption […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Microsoft 365 Apps Exploited via Malicious Excel Files A newly disclosed remote code execution (RCE) vulnerability, tracked as CVE-2025-60727, affects Microsoft 365 Apps, allowing attackers to execute arbitrary code through malicious Excel documents. This vulnerability arises from an out-of-bounds read condition in Excel's file-parsing mechanism, leading to potential memory corruption. It impacts multiple versions of Microsoft Office and is particularly concerning in enterprise environments where document-based attacks are common. The vulnerability was publicly disclosed on June 29, 2026, and highlights the ongoing risks associated with phishing campaigns that utilize malicious documents. Organizations are urged to assess their defenses against this exploit vector. 2 sources 69

Extracted Entities

Microsoft 365 Apps RCE Vulnerability Lets Attackers Execute Code via Malicious Excel Files

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)