Microsoft Excel Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Microsoft Office Excel. This vulnerability allows an unauthorized attacker to execute code locally. It affects multiple versions of Excel, including the 2016, 2019, and Office LTSC 2021 and 2024 editions, as well as Excel for Mac. The vulnerability arises from improper memory handling, which can be exploited to overwrite memory and execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Instructions for downloading the update are available on the Microsoft Update Catalog and through the Microsoft 365 Apps Security Updates page.