CVE-2024-20677

Summary

CVE-2024-20677 is a newly discovered vulnerability affecting FBX files in Microsoft Office. This issue could potentially enable remote code execution. In response, Microsoft has disabled the feature to insert FBX files in Word, Excel, PowerPoint, Outlook for Windows and Mac, affecting Office 2019, Office 2021, Office LTSC for Mac 2021, and Microsoft 365. Previously inserted 3D models from FBX files will continue to function, but the Link to File option is no longer supported. This change was implemented as part of the January 9, 2024 security update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.