Skip to main content
CUI

Vulnerability V-223287

Back

V-223287

CAT II

Custom user interface (UI) code must be blocked from loading in all Office applications.

Ships Affected
1
Total Findings
4
Open
2
Closed
2

Check Text

Verify the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Global Options >> Customize >> Disable UI extending from documents and templates is set to Enabled: Disallow in Word; Excel; PowerPoint; Access; Outlook; Publisher; Project; Visio; InfoPath Use the Windows Registry Editor to navigate to the following key: HKCU\software\policies\microsoft\office\16.0\common\toolbars If the value noextensibilitycustomizationfromdocument is REG_DWORD = 1 for all installed Office programs, this is not a finding.

Fix Text

Set the policy value for User Configuration >> Administrative Templates >> Microsoft Office 2016 >> Global Options >> Customize >> Disable UI extending from documents and templates to Enabled: Disallow in Word; Excel; PowerPoint; Access; Outlook; Publisher; Project; Visio; InfoPath.

STIG Reference

STIG
Microsoft Office 365 ProPlus Security Technical Implementation Guide
Version
3
Release
5
Rule ID
SV-223287r961863_rule

All Occurrences

This vulnerability appears on 1 ship(s)

Ship Hull # Source File Status Assigned To Scan Date Actions
USNS MONTFORD POINT T-ESD-1 MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl
Unassigned 2026-03-04T15:25:42.171357 View in Context
USNS MONTFORD POINT T-ESD-1 MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl
Unassigned 2026-03-04T15:25:16.145630 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_MSOffice365_V3R3_20251023-141031.ckl
Unassigned 2026-01-14T12:57:28.231385 View in Context
USNS MONTFORD POINT T-ESD-1 _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_MSOffice365_V3R3_20251023-142330.ckl
Unassigned 2026-01-14T12:57:25.987513 View in Context
CUI