Microsoft Word Remote Code Execution Vulnerability
CVE-2024-21379
Summary
A vulnerability exists in Microsoft Word that may allow an attacker to execute arbitrary code on a user's system. This occurs when a specially crafted document is opened by the affected version of the application. Successful exploitation of this vulnerability may enable an attacker to take control of the affected system, allowing them to install programs, view, change or delete data, or create new accounts with full user rights. Users of Microsoft Word are urged to apply the recommended updates to mitigate the risk associated with this security flaw.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Office 2019 32-bit Systems 19.0.0
Microsoft Office LTSC 2021 x64-based Systems 16.0.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved