Microsoft Excel Security Feature Bypass Vulnerability

A security feature bypass vulnerability has been identified in Microsoft Office Excel. This vulnerability allows an unauthorized attacker to locally bypass macro security controls, specifically the setting that disables Excel 4.0 macros. The issue arises from improper access control, enabling the exploitation of Trust Center protections by using an attacker-supplied Quick Access Toolbar button to trigger the disabled macros.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of Excel 4.0 macros, bypassing established security controls.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office LTSC for Mac 2021 and 2024, the security update is also available via the Microsoft AutoUpdate tool.