Microsoft Outlook Improper Input Validation Leading to Local Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Office Outlook. This issue arises from improper input validation, allowing an authorized attacker to execute code locally. The vulnerability affects several Outlook versions, including Outlook 2016, Office LTSC 2024, Office LTSC 2021, Microsoft 365 Apps for Enterprise, and Outlook 2019.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security update instructions can be found on the Microsoft 365 Apps Security Updates page.