Microsoft Excel Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Microsoft Office Excel. This vulnerability allows an unauthorized attacker to execute code locally on the affected system. It is present in several versions of Microsoft Excel, including Microsoft Office LTSC 2024, Microsoft Office LTSC 2021, and Microsoft 365 Apps for Enterprise, both in 32-bit and 64-bit editions.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft 365 Apps Security Updates channel to address this vulnerability. Instructions for downloading this update can be found on the Microsoft Office Updates page.