Microsoft Office Click-To-Run Privilege Escalation Vulnerability

A vulnerability allowing improper access control has been identified in Microsoft Office Click-To-Run. This issue enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple Office products, including Office LTSC 2024, Office LTSC 2021, Microsoft 365 Apps for Enterprise, Office 2019, and various Click-To-Run editions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for their specific Office version from the Microsoft Update Catalog. For guidance on which version to download, refer to the Microsoft Office Security Updates page.