LUCAMEMicrosoft has updated its security guidance for a Windows Win32k vulnerability to include supported versions of Microsoft Office, which turn out to be affected as well. The flaw is an elevation of privilege issue, meaning an attacker who's already on a machine could use it to gain higher-level access than they should have. Microsoft has now added Office to the list of products that need patching. If you've already applied Windows updates but haven't touched Office, you may not be fully covered.
What this means for your business
If your staff are running Microsoft Office on Windows, you need to make sure the latest Office security updates have been installed, not just the Windows ones. Check with your IT team or support provider that both sets of patches are in place. This is a straightforward update rather than an emergency response, but it's worth confirming sooner rather than later.