Microsoft Office Type Confusion Vulnerability Leading to Remote Code Execution

A type confusion vulnerability has been identified in Microsoft Office, allowing unauthorized attackers to execute code locally. This issue arises from the access of resources using incompatible types. The vulnerability affects multiple Office products, including Office 2016, Office 2019, Office 2021, and various versions of Office for Mac and Office for Android.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog or via the Google Play Store for the Android version. Instructions for updating can be found in the Microsoft Office Security Update Release Notes.