Microsoft Office Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Microsoft Office. This vulnerability allows an unauthorized attacker to execute code locally. It affects several different versions and editions of Microsoft Office, including Office 2016, Office LTSC 2024, Office for Android, Office LTSC 2021, Microsoft 365 Apps for Enterprise, and Office 2019.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, the security update will be released as soon as possible, and customers will be notified via a revision to this CVE information.