Microsoft Office Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? Successful exploitation of this vulnerability requires a user to open a malicious email with an affected version of Microsoft Outlook and then perform specific actions to trigger the vulnerability.
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition.
Is the Preview Pane an attack vector for this vulnerability? Yes. The Preview Pane is an attack vector, but additional user interaction is required.
🎯 Affected products8
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office LTSC 2021 for 32-bit editions
- Microsoft Office LTSC 2021 for 64-bit editions
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5002591 (Security Update) — fixed build 16.0.5452.1000 KB5002575 (Security Update) — fixed build 16.0.5452.1000
🔗 References (8)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30101
- referencehttps://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates
- patchhttps://www.microsoft.com/download/details.aspx?familyid=3094b75b-0f54-4ea7-895b-17e044ac71d5
- referencehttps://support.microsoft.com/help/5002591
- patchhttps://www.microsoft.com/download/details.aspx?familyid=8f70d01d-35a2-4691-8783-7f28c9426625
- referencehttps://support.microsoft.com/help/5002575
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6f1395a8-c077-4d09-9901-0abc529f7f4e
- patchhttps://www.microsoft.com/download/details.aspx?familyid=57d77e40-bf9a-4c83-9d9d-34c5352389d1