Microsoft Word Use-After-Free Vulnerability Leading to Remote Code Execution

Vulnerability

A use-after-free vulnerability has been identified in Microsoft Word, allowing an unauthorized attacker to execute code locally. This issue arises when the application improperly manages memory, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could allow for remote code execution on the affected system.

Remediation

Users can apply the security updates available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Word Security Update Guide.

Added: Jul 8, 2025, 7:37 PM
Updated: Jul 8, 2025, 7:37 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.