microsoft excel security

Microsoft’s naming here is not contradictory once you separate the attack vector from the effect. In CVSS, AV:L means the exploit requires local interaction on the target machine, or a local foothold in the attack path, while Remote Code Execution in Microsoft’s title describes the impact: the...