Microsoft Office Visio Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office Visio. This vulnerability allows an unauthorized attacker to execute code locally. It arises when the application improperly manages memory, leading to potential exploitation by manipulating the application's memory handling.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security update instructions are available on the Microsoft 365 Apps Security Updates page.