Microsoft Office Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office, which allows an unauthorized attacker to execute code locally. This vulnerability affects multiple Office products, including Office 2016, Office LTSC 2024, Office for Android, and several versions of Office 2019 and 2021. The vulnerability arises from improper memory management, leading to a use-after-free condition that can be exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can apply the security update available through the Microsoft Update Catalog or via the Microsoft 365 Apps security update channel. Specific update details can be found in the Microsoft Knowledge Base article 5002730.