Microsoft Office Excel Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the local machine.

Remediation

Security updates addressing this vulnerability are available for multiple versions of Microsoft Office, including Office 2019, Office 2021, Office LTSC 2021, Office LTSC 2024, and various Excel 2016 editions. For Office for Mac, updates are available for both the 2021 and 2024 versions. Instructions for downloading these updates can be found in the Microsoft Update Catalog or through the Microsoft 365 Apps Security Updates resource.