Microsoft Patches Two Dozen RCE Flaws in Office
Microsoft patched about two dozen high-severity Office remote-code-execution flaws, none known exploited.
Microsoft released patches for more than 30 newly disclosed vulnerabilities, most of them in Office. About two dozen are high-severity remote code execution flaws, including roughly six reachable through the Preview Pane, generally via a crafted document that a user opens. Word received most fixes, with smaller sets for Excel, Outlook, PowerPoint, and SharePoint, plus information-disclosure and a security-bypass issue. Microsoft also fixed defects in ASP.NET Core, Identity Web, and MSAL for Node.js, and said none were exploited as zero-days. Updates were additionally noted for Office LTSC for Mac 2021 and 2024 and Microsoft 365 for Mac.
74