Microsoft Excel LTSC 2024 · Remote Code Execution (RCE)
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 19 Jul 2025, 21:11 UTC
What to do
AI-suggested
1. Immediate deployment of application control and endpoint detection and response (EDR) solutions to monitor and block suspicious Excel activities and scripts. 2. Restrict the opening of Excel files from untrusted sources, including email attachments and downloads, through user training and email filtering policies. 3. Disable or limit macros and embedded content execution within Excel where possible, as these are common vectors for RCE exploits. 4. Employ network segmentation to limit lateral movement if a system is compromised. 5. Monitor for indicators of compromise related to the known Python exploit code, including unusual process executions or network connections initiated by Excel. 6. Stay alert for official patches or advisories from Microsoft and prioritize their deployment once available. 7. Consider using sandbox environments to open suspicious Excel files safely. 8. Implement strict privilege management to ensure users run Excel with the least privileges necessary, reducing the impact of potential exploitation.
Description
Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
Indicators of compromise
Exploit source code
# Titles: Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
# Author: nu11secur1ty
# Date: 06/16/2025
# Vendor: Microsoft
# Software: https://www.microsoft.com/en/microsoft-365/excel?market=af
# Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27751
# CVE-2025-47957
# Versions: Microsoft Office LTSC 2024 , Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise
## Description:
The attacker can trick any user into opening and executing their code by
sending a malic…