Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in multiple Microsoft Office products, including Office LTSC 2024, Office LTSC 2021, and Microsoft 365 Apps for Enterprise. This vulnerability arises from a use-after-free error, allowing an attacker to execute arbitrary code on the affected system. The issue requires local access and user interaction to exploit.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. Instructions for downloading this update can be found on the Microsoft Office Update Guidance page.