Microsoft Office Use-After-Free Vulnerability Allowing Local Code Execution

A use-after-free vulnerability has been identified in Microsoft Office, which allows an unauthorized attacker to execute code locally. This vulnerability requires user interaction, as the attacker must send a malicious file that the user needs to open. The Preview Pane can also be used to exploit this vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft Office 2016, the security update is available via the Microsoft Download Center.