Microsoft Publisher Security Feature Bypass Vulnerability

Microsoft Publisher allows attackers to bypass security protections that normally prevent malicious documents from running. This means a specially crafted file could execute harmful code when opened by a user.

A security feature bypass in Microsoft Publisher (CWE-693) permits threat actors to circumvent protective mechanisms through a specially crafted document file. The attack requires user interaction (document opening) and could result in arbitrary code execution with the privileges of the affected user.