<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current use
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then…
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Office 2019 | 19.0.0 |
| Microsoft | Microsoft Office 2019 for Mac | 16.0.0 |
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 |
| Microsoft | Microsoft Office 2016 | 16.0.0 |
| Microsoft | Microsoft Office 2016 for Mac | 16.0.0 |
| Microsoft | Microsoft Office 2010 Service Pack 2 | 13.0.0.0 |
| Microsoft | Microsoft Office 2013 Service Pack 1 | 15.0.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.