Microsoft Excel Integer Underflow Vulnerability Leading to Remote Code Execution

An integer underflow vulnerability has been identified in Microsoft Office Excel. This flaw allows an unauthorized attacker to execute code locally. The vulnerability arises from an integer underflow, where values wrap around, potentially leading to unexpected behavior or exploitation.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for Microsoft Excel 2016 (both 32-bit and 64-bit editions) from the Microsoft Update Catalog. For Microsoft Office LTSC 2021, 2024, and 365 for Mac, the security updates will be released as soon as possible, with customers being notified via a revision to the CVE information. Office Online Server users can also download the security update from the Microsoft Update Catalog.