Microsoft Office Type Confusion Vulnerability Leading to Remote Code Execution

A type confusion vulnerability has been identified in Microsoft Office, allowing an unauthorized attacker to execute code locally. This issue arises from the access of a resource using an incompatible type, creating a scenario where an attacker could manipulate the execution flow to execute arbitrary code.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, updates will be released as soon as possible and customers will be notified.