Microsoft Office Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Microsoft Office. This issue arises from an uncaught exception, which allows an unauthorized attacker to disrupt service locally. The vulnerability affects multiple products within the Microsoft Office suite, including Microsoft 365 Apps for Enterprise (both 32-bit and 64-bit versions) and Microsoft Office LTSC 2024 (also available in 32-bit and 64-bit editions).

Impact

Exploitation of this vulnerability leads to a significant disruption of service, causing a denial-of-service condition.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security update details are available on the Office 365 ProPlus Security Updates page. Microsoft Office LTSC 2024 users can find security update information on the Microsoft 365 Apps Security Updates page.