Microsoft Office Spoofing Vulnerability Allowing Unauthorized Local Access

A vulnerability in Microsoft Office products, including Excel and Word for Android, as well as Office LTSC for Mac 2021 and 2024, has been identified. This vulnerability involves improper access control, which allows an unauthorized attacker to perform spoofing actions locally. The issue arises from a lack of adequate access controls, enabling spoofing opportunities within the affected applications.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing actions within the affected Microsoft Office applications.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Instructions for applying the update are available in the release notes linked in the Knowledge Base Articles for each affected product.