Microsoft Excel Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Microsoft Office Excel. This vulnerability allows an unauthorized attacker to execute code locally. It affects several different versions and editions of Excel, as well as various Microsoft Office LTSC 2024 and 2021 products for both Windows and Mac.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can apply the security update available through the Microsoft Update Catalog or via the Click-to-Run service. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product-specific update guidance.