The following severity ratings assume the potential maximum impact of the vulnerability. To determine the support life cycle for your software version or edition, see Microsoft Support Lifecycle. Versions or editions that are not listed are either past their support life cycle or are not affected. The following software versions or editions are affected. Affected Software and Vulnerability Severity Ratings For more information about the vulnerabilities, see the Vulnerability Information section.įor more information about this update, see Microsoft Knowledge Base Article 3089664. The security update addresses the vulnerabilities by correcting how Microsoft Office handles files in memory and by modifying how SharePoint validates web requests. Microsoft SharePoint Foundation 2013, Microsoft SharePoint Server 2013įor more information, see the Affected Software section.This security update is rated Important for all supported editions of the following software: This security update is rated Critical for all supported editions of the following software: Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. This security update resolves vulnerabilities in Microsoft Office. Published: Septem| Updated: November 10, 2015 Feedback In this article Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3089664)

Office 2013 service pack 3