Description
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft 365 Apps for Enterprise
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office 2016
16.0.0 to < 16.0.5569.1002affected
Microsoft Microsoft Office 2019
19.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office 365 for Mac
-affected
Microsoft Microsoft Office LTSC 2021
16.0.1 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC 2024
16.0.0 to < https://aka.ms/OfficeSecurityReleasesaffected
Microsoft Microsoft Office LTSC for Mac 2021
-affected