- Vendor / Project
- Microsoft
- Product
- Excel
- Date added
- Mar 3, 2022
- Due date
- Mar 24, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-94
Description
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
Required action
Apply updates per vendor instructions.