Microsoft Excel Untrusted Pointer Dereference Vulnerability Allowing Local Code Execution

A vulnerability in Microsoft Office Excel has been identified, allowing an unauthorized attacker to execute code locally on the affected system. This issue arises from an untrusted pointer dereference, which could be exploited by convincing a user to open a malicious file. The vulnerability affects multiple versions of Excel, including Excel 2016, Office LTSC for Mac 2021 and 2024, Office LTSC 2021, Microsoft 365 Apps for Enterprise, and Office Online Server.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, the security update will be released as soon as possible, and customers will be notified via a revision to this CVE information.