Description
Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft 365 Apps for Enterprise | Microsoft / Microsoft 365 Apps for Enterprise | >= 16.0.1, < https://aka.ms/OfficeSecurityReleases | affected |
| Microsoft Office 2016 | Microsoft / Microsoft Office 2016 | >= 16.0.0, < 16.0.5539.1001 | affected |
| Microsoft Office 2019 | Microsoft / Microsoft Office 2019 | >= 19.0.0, < 16.0.10417.20095 | affected |
| Microsoft Office LTSC 2021 | Microsoft / Microsoft Office LTSC 2021 | >= 16.0.1, < https://aka.ms/OfficeSecurityReleases | affected |
| Microsoft Office LTSC 2024 | Microsoft / Microsoft Office LTSC 2024 | >= 16.0.0, < https://aka.ms/OfficeSecurityReleases | affected |