LOW · 3.3

CVE-2025-49756

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.

Vulnerability Description

Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.

CVSS Score

3.3

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Microsoft365 Apps-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-49756?

CVE-2025-49756 is a vulnerability with a CVSS score of 3.3 (LOW). Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.

How severe is CVE-2025-49756?

CVE-2025-49756 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-49756?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft 365 Apps.