Microsoft Excel Remote Code Execution Vulnerability

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following:

  - Microsoft Excel is affected by a remote code execution vulnerability. (CVE-2024-30042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability:

  - Microsoft Excel is affected by a remote code execution vulnerability. (CVE-2024-30042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft Office for Mac installed on the remote host is affected by a vulnerability as referenced in the may-14-2024 advisory.

  - Microsoft Excel Remote Code Execution Vulnerability (CVE-2024-30042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
197061	Security Updates for Microsoft Office Online Server (May 2023)	Nessus	Windows : Microsoft Bulletins	high
197060	Security Updates for Microsoft Office Products C2R (May 2024)	Nessus	Windows	high
197040	Security Updates for Microsoft Office Products (May 2024) (macOS)	Nessus	MacOS X Local Security Checks	high
197013	Security Updates for Microsoft Excel Products (May 2024)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2024-30042

high

Tenable Plugins

high

high

high

high