← back
CVE-2023-32029

Microsoft Excel Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 53.5%CWE-125
In short

Microsoft Excel can execute malicious code when you open a specially crafted file, allowing an attacker to take control of your computer. This happens because Excel doesn't properly validate data before processing it.

Technical detail

Out-of-bounds read vulnerability in Microsoft Excel's parsing engine allows remote code execution through a maliciously crafted workbook file. An attacker can achieve code execution in the context of the user running Excel by exploiting improper memory bounds checking, requiring user interaction to open the malicious file.

Summary generated and translated by AI from the official description.
Microsoft Excel Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →