Microsoft · Security update · March 11, 2025

KB5002690: March 2025 security update

KB5002690, released March 11, 2025, fixes 3 CVEs in Office Online Server. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0071
53rd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2025-24082 Microsoft Office Excel Remote Code Execution 7.8 0.0071 Exploitation Less Likely
High CVE-2025-24081 Microsoft Office Excel Remote Code Execution 7.8 0.0070 Exploitation Less Likely
High CVE-2025-24075 Microsoft Office Excel Remote Code Execution 7.8 0.0069 Exploitation Less Likely
Showing 1 to 3 of 3 1