CVE-2025-53730
vulnerability analysis and mitigation

Overview

CVE-2025-53730 is a Remote Code Execution vulnerability affecting Microsoft Office Visio. The vulnerability was disclosed as part of Microsoft's August 2025 Patch Tuesday updates (Rapid7 Blog, Fortra Blog). The vulnerability has a CVSSv3 base score of 7.8, indicating a high severity issue.

Technical details

The vulnerability is classified as a Remote Code Execution (RCE) vulnerability in Microsoft Office Visio. The CVSS score of 7.8 suggests that the vulnerability has significant potential impact, though Microsoft has not marked it as more likely to be exploited (Rapid7 Blog, Qualys Research).

Impact

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. The vulnerability affects Microsoft Office Visio installations and could potentially lead to unauthorized control over affected systems (Qualys Research).

Mitigation and workarounds

Microsoft has released security updates to address this vulnerability as part of the August 2025 Patch Tuesday. Users are advised to apply the security updates KB5002752, KB5002756, KB5002758, KB5002763, and KB5002765 to affected systems (Qualys Research).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management