Description (CNA)
A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Microsoft Office | affected 2019 for 32-bit editions; affected 2019 for 64-bit editions |
| Microsoft / Office 365 ProPlus | affected 32-bit Systems; affected 64-bit Systems |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.