Microsoft Office Word Use-After-Free Vulnerability Leading to Local Remote Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Word. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability allows for local remote code execution, where an attacker can execute arbitrary code on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog or via Click-to-Run for Microsoft 365 Apps for Enterprise. Instructions for downloading the security update are available on the Microsoft 365 Apps Security Updates page.