ZDI-23-1179: Microsoft Excel SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1179?
The severity of ZDI-23-1179 is rated at risk level 61.
How do I fix ZDI-23-1179?
To fix ZDI-23-1179, ensure that you apply the latest security updates provided by Microsoft for Excel.
What impact does ZDI-23-1179 have on my system?
ZDI-23-1179 allows remote code execution, meaning an attacker could execute arbitrary code if you interact with a malicious file or page.
What versions of Microsoft Excel are affected by ZDI-23-1179?
ZDI-23-1179 affects specific installations of Microsoft Excel, particularly those that have not been patched against this vulnerability.
Is user interaction required to exploit ZDI-23-1179?
Yes, user interaction is required to exploit ZDI-23-1179, as the victim must open a malicious file or visit a malicious webpage.