Microsoft Office Excel Untrusted Pointer Dereference Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Microsoft Office Excel. This issue arises from an untrusted pointer dereference, which could enable an unauthorized attacker to read small portions of heap memory over a network. The vulnerability affects multiple Microsoft Office products, including Excel, and requires user interaction to exploit.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing an attacker to read portions of the application's heap memory.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2024, the update is available via the Mac App Store. Instructions for downloading the security update for Microsoft 365 Apps for Enterprise are also available on the Microsoft Office Update page.