Microsoft Excel Type Confusion Vulnerability Leading to Remote Code Execution

A type confusion vulnerability has been identified in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This issue arises from the access of a resource using an incompatible type, creating a scenario where an attacker could potentially manipulate the execution flow.

Impact

Exploitation of this vulnerability could allow for remote code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Office LTSC 2024, Office LTSC 2021, Office 2019, and Excel 2016, security updates are available. Instructions for downloading these updates can be found in the Microsoft Office Update Guide.