Microsoft Excel Type Confusion Vulnerability Leading to Remote Code Execution

A type confusion vulnerability has been identified in Microsoft Excel, allowing an unauthorized attacker to execute code locally. This issue arises from the access of a resource using an incompatible type, creating a scenario where an attacker could manipulate the application's behavior.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Security updates for this vulnerability are available for Microsoft Office LTSC for Mac 2021 and 2024, as well as for Microsoft Excel 2016 (both 32-bit and 64-bit editions). For Windows users, the security update is part of the regular update process through Windows Update. Office Online Server users can refer to the Microsoft Knowledge Base for update details.