Microsoft Office Word Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Word. This vulnerability allows an unauthorized attacker to execute code locally on the affected system. It arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog and via Click-to-Run for various Microsoft 365 applications. Specific update details can be found in the Microsoft Knowledge Base article 5002662.