France’s National Agency for the Security of Information Systems has warned of multiple vulnerabilities in Microsoft Office. They could allow an attacker to execute arbitrary code remotely, compromise data confidentiality or bypass security policies.
The affected products include Microsoft 365 Apps for enterprise for 32-bit and 64-bit systems, and Microsoft Office 365 for Mac versions earlier than 16.114.26101123.
The notice also lists Microsoft Office LTSC 2021 and 2024 for 32-bit and 64-bit systems, Microsoft Office LTSC for Mac 2021 and 2024, and Office Online Server. Affected versions are earlier than 16.0.14334.20974 for LTSC 2021, 16.0.17932.21056 for LTSC 2024, 16.114.26101123 for the listed Mac editions, and 16.0.10417.20228 for Office Online Server.