Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Office Excel. This issue arises from the use of uninitialized resources, allowing an unauthorized attacker to execute code on the local machine. The vulnerability affects several different versions and editions of Microsoft Excel, including the 2024 and 2021 LTSC versions for both Mac and Windows, as well as Microsoft Office 2019 and Microsoft 365 Apps for Enterprise.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog or via the Click-to-Run service, depending on their version of Microsoft Office.