Description
Microsoft Office ClickToRun Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 – < https://aka.ms/OfficeSecurityReleases | https://aka.ms/OfficeSecurityReleases |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-oletools | 0.60.1-1.2 | openSUSE-SU-2026:12022-1, openSUSE-SU-2024:14151-1 |
Advisories 3
- openSUSE-SU-2026:12022-1 python313-oletools-0.60.2-2.4 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2024:14151-1 python310-oletools-0.60.1-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- MSRC-CVE-2021-27058 Microsoft Office ClickToRun Remote Code Execution Vulnerability Microsoft Security Response Center · Mar 9, 2021
References
- Microsoft Office ClickToRun Remote Code Execution Vulnerability vendor-advisory patch