Microsoft Excel Use-After-Free Vulnerability Allowing Local Remote Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited under certain conditions.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the local machine.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, the update will be released as soon as possible, and customers will be notified via a revision to this CVE information.