Microsoft Excel Information Disclosure Vulnerability

A vulnerability in Microsoft Office Excel allows unauthorized attackers to locally disclose sensitive information. This issue affects multiple versions of Excel, including Excel 2016 (both 32-bit and 64-bit editions), Microsoft 365 Apps for Enterprise (32-bit and 64-bit), Office 2019 (32-bit and 64-bit), Office LTSC 2024 (32-bit and 64-bit), and Office LTSC 2021 (32-bit and 64-bit). The vulnerability arises from the improper handling of certain data, which could allow an attacker to read small portions of heap memory.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, specifically small portions of heap memory.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, the update is available via the Click-to-Run service.