CVE-2023-32029: high-severity vulnerability in Microsoft 365 Apps for Enterprise
Microsoft Excel Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Microsoft Excel can execute malicious code when you open a specially crafted file, allowing an attacker to take control of your computer. This happens because Excel doesn't properly validate data before processing it.
Out-of-bounds read vulnerability in Microsoft Excel's parsing engine allows remote code execution through a maliciously crafted workbook file. An attacker can achieve code execution in the context of the user running Excel by exploiting improper memory bounds checking, requiring user interaction to open the malicious file.
In the same product, most dangerous first.