Microsoft Office Visio Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Visio. This vulnerability allows an unauthorized attacker to execute code locally. It requires user interaction to be exploited, as a user must be tricked into opening a malicious file in Visio.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security updates can be downloaded via the Click-to-Run service.