Medium 5.5

Microsoft Office Remote Code Execution Vulnerability

CVE-2024-49065 First seen on SecPulse Dec 11, 2024

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Microsoft	MicrosoftMicrosoft 365 Apps for Enterprise	≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft Office 2019	≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft Office LTSC 2021	≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft Office LTSC 2024	≥ 1.0.0, < https://aka.ms/OfficeSecurityReleases→ https://aka.ms/OfficeSecurityReleases	https://aka.ms/OfficeSecurityReleases
Microsoft	MicrosoftMicrosoft Office LTSC for Mac 2021	≥ 16.0.1, < 16.92.24120731→ 16.92.24120731	16.92.24120731
Microsoft	MicrosoftMicrosoft Office LTSC for Mac 2024	≥ 1.0.0, < 16.92.24120731→ 16.92.24120731	16.92.24120731
Microsoft	MicrosoftMicrosoft SharePoint Enterprise Server 2016	≥ 16.0.0, < 16.0.5478.1000→ 16.0.5478.1000	16.0.5478.1000
Microsoft	MicrosoftMicrosoft SharePoint Server 2019	≥ 16.0.0, < 16.0.10416.20026→ 16.0.10416.20026	16.0.10416.20026
Microsoft	MicrosoftMicrosoft Word 2016	≥ 16.0.1, < 16.0.5478.1000→ 16.0.5478.1000	16.0.5478.1000

Show all (9)

References

• patch secure@microsoft.com